CVE-2021-40117
A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because incoming SSL/TLS packets are not properly processed. An attacker could exploit this vulnerability by sending a crafted SSL/TLS packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
- Score
- CVSS 3.1 8.6 High
- Status
- Modified - psirt@cisco.com
- Published
- 2021-10-27
- Last modified
- 2024-11-07
- Weaknesses
- CWE-119, CWE-400
Affected products
- Adaptive Security Appliance (Cisco)
- Adaptive Security Appliance Software (Cisco)
- Asa 5505 Firmware (Cisco)
- Asa 5512-x Firmware (Cisco)
- Asa 5515-x Firmware (Cisco)
- Asa 5525-x Firmware (Cisco)
- Asa 5545-x Firmware (Cisco)
- Asa 5555-x Firmware (Cisco)
- Asa 5580 Firmware (Cisco)
- Asa 5585-x Firmware (Cisco)
- Cisco Adaptive Security Appliance Asa Software (Cisco)
- Secure Firewall Threat Defense (Cisco)
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-dos-4ygzLKU9
