Vulnerability in Cisco Adaptive_security_appliance
CVE-2021-34793
A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address table…
EPSS: 0.006 (47.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.
Affected products
- Cisco Adaptive_security_appliance
- Cisco Adaptive_security_appliance_software
- Cisco Asa_5505
- Cisco Asa_5505_firmware — versions 009.008\(004.025\)
- Cisco Asa_5512-x
- Cisco Asa_5512-x_firmware — versions 009.008\(004.025\)
- Cisco Asa_5515-x
- Cisco Asa_5515-x_firmware — versions 009.008\(004.025\)
- Cisco Asa_5525-x
- Cisco Asa_5525-x_firmware — versions 009.008\(004.025\)
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-34793?
- CVE-2021-34793 is a high-severity vulnerability in Cisco Adaptive_security_appliance, classified under Improper Enforcement of Message Integrity During Transmission in a Communication Channel. CVSS score: 8.6/10. Published 2021-10-27.
- How severe is CVE-2021-34793?
- High severity. CVSS v3 base score is 8.6 out of 10.