Aller au contenu
8.6 Élevée

CVE-2021-1573 A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower…

Description

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper input validation when parsing HTTPS requests. An attacker could exploit this vulnerability by sending a malicious HTTPS request to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Produits et versions touchés

Produit Versions touchées Corrigé en
Cisco Adaptive Security Appliance Software 6.4 premières → < 6.4.0.13 6.4.0.13
Cisco Firepower Threat Defense Software 6.6 premières → < 6.6.5 6.6.5

Références

Chronologie

  1. Publiée
  2. Dernière modification
Les 2 CVE de Cisco Adaptive Security Appliance Software →
Suivre cette CVE