Vulnerability in Cisco 1100-4g\/6g Integrated Services Router
CVE-2021-1495
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of specific HTTP header parameters. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass a configured file policy for HTTP packets and deliver a malicious payload.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N.
EPSS exploit prediction
EPSS: 0.017 (76.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 77th percentile — 76.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.017 · newest: 0.017 · change: 0.000
Affected products
- Cisco 1100-4g\/6g Integrated Services Router
- Cisco 1101 Integrated Services Router
- Cisco 1109 Integrated Services Router
- Cisco 1111x Integrated Services Router
- Cisco 111x Integrated Services Router
- Cisco 1120 Integrated Services Router
- Cisco 1160 Integrated Services Router
- Cisco 3000 Integrated Services Router
- Cisco 4221 Integrated Services Router
- Cisco 4331 Integrated Services Router
Weakness classification (CWE)
Public proof-of-concept exploits
References
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http-fp-… (vendor-advisory, Vendor Advisory)
- lists.debian.org/debian-lts-announce/2023/02/msg00011.html (mailing-list)
- www.debian.org/security/2023/dsa-5354 (vendor-advisory)
Frequently asked questions
- What is CVE-2021-1495?
- CVE-2021-1495 is a medium-severity vulnerability in Cisco 1100-4g\/6g Integrated Services Router, classified under Improper Handling of Exceptional Conditions. CVSS score: 5.8/10. Published 2021-04-29.
- How severe is CVE-2021-1495?
- Medium severity. CVSS v3 base score is 5.8 out of 10.
- Is CVE-2021-1495 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.