What is CVE-2021-34749?

CVE-2021-34749 is a medium-severity vulnerability in Cisco Web Security Appliance (Wsa), classified under Information Disclosure. CVSS score: 5.8/10. Published 2021-08-18.

How severe is CVE-2021-34749?

Medium severity. CVSS v3 base score is 5.8 out of 10.

Information disclosure in Cisco Web Security Appliance (Wsa)

CVE-2021-34749

A vulnerability in Server Name Identification (SNI) request filtering of Cisco Web Security Appliance (WSA), Cisco Firepower Threat Defense (FTD), and the Snort detection engine could allow an unauthenticated, remote attacker to bypass fil…

Vulnerability class: Information Disclosure

EPSS: 0.017 (74.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N.

Affected products

Cisco Web Security Appliance (Wsa) — versions n/a
Cisco Firepower_management_center_virtual_appliance_firmware — versions 6.6.0, 6.7.0, 7.0.0
Cisco Ironport_web_security_appliance — versions 14.5
Cisco Secure_firewall_management_center — versions 2.9.18

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (vendor-advisory, Patch, Vendor Advisory)
psirt@cisco.com (mailing-list)
psirt@cisco.com (vendor-advisory)

Frequently asked questions

What is CVE-2021-34749?: CVE-2021-34749 is a medium-severity vulnerability in Cisco Web Security Appliance (Wsa), classified under Information Disclosure. CVSS score: 5.8/10. Published 2021-08-18.
How severe is CVE-2021-34749?: Medium severity. CVSS v3 base score is 5.8 out of 10.