Vulnerability in Cisco Adaptive Security Appliance
CVE-2021-34793
A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service (DoS) vulnerability. This vulnerability is due to incorrect handling of certain TCP segments when the affected device is operating in transparent mode. An attacker could exploit this vulnerability by sending a crafted TCP segment through an affected device. A successful exploit could allow the attacker to poison the MAC address tables in adjacent devices, resulting in network disruption.
EPSS: 0.007 (49.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.
Affected products
- Cisco Adaptive_security_appliance
- Cisco Adaptive_security_appliance_software
- Cisco Asa_5505
- Cisco Asa_5505_firmware — versions 009.008(004.025), 009.008\(004.025\)
- Cisco Asa_5512-x
- Cisco Asa_5512-x_firmware — versions 009.008(004.025), 009.008\(004.025\)
- Cisco Asa_5515-x
- Cisco Asa_5515-x_firmware — versions 009.008(004.025), 009.008\(004.025\)
- Cisco Asa_5525-x
- Cisco Asa_5525-x_firmware — versions 009.008(004.025), 009.008\(004.025\)
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-34793?
- CVE-2021-34793 is a high-severity vulnerability in Cisco Adaptive Security Appliance, classified under Improper Enforcement of Message Integrity During Transmission in a Communication Channel. CVSS score: 8.6/10. Published 2021-10-27.
- How severe is CVE-2021-34793?
- High severity. CVSS v3 base score is 8.6 out of 10.