Unknown
CVE-2021-40117
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
Add References:
CVE-2021-40117
MITRE ATT&CK
Collection
Command and Control
Credential Access
Defense Evasion
Discovery
Execution
Exfiltration
Impact
Initial Access
Lateral Movement
Persistence
Privilege Escalation
Topic Tags
Description
A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because incoming SSL/TLS packets are not properly processed. An attacker could exploit this vulnerability by sending a crafted SSL/TLS packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Add Assessment
No one has assessed this topic. Be the first to add your voice to the community.
CVSS V3 Severity and Metrics
General Information
Vendors
- cisco
Products
- adaptive security appliance,
- adaptive security appliance software,
- asa 5505 firmware 009.009(002.085),
- asa 5505 firmware 009.014(002.106),
- asa 5512-x firmware 009.009(002.085),
- asa 5512-x firmware 009.014(002.106),
- asa 5515-x firmware 009.009(002.085),
- asa 5515-x firmware 009.014(002.106),
- asa 5525-x firmware 009.009(002.085),
- asa 5525-x firmware 009.014(002.106),
- asa 5545-x firmware 009.009(002.085),
- asa 5545-x firmware 009.014(002.106),
- asa 5555-x firmware 009.009(002.085),
- asa 5555-x firmware 009.014(002.106),
- asa 5580 firmware 009.009(002.085),
- asa 5580 firmware 009.014(002.106),
- asa 5585-x firmware 009.009(002.085),
- asa 5585-x firmware 009.014(002.106),
- firepower threat defense
References
Additional Info
Technical Analysis
Report as Exploited in the Wild
CVE ID
AttackerKB requires a CVE ID in order to pull vulnerability data and references from the CVE list and the National Vulnerability Database. If available, please supply below:
