CVE-2021-1236
13.01.2021, 22:15
Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit this vulnerability by sending crafted packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network.Enginsight
| Vendor | Product | Version |
|---|---|---|
| cisco | ios_xe | 𝑥 < 17.4.1 |
| cisco | firepower_threat_defense | 𝑥 < 6.5.0.5 |
| cisco | secure_firewall_management_center | 2.9.14.0 |
| cisco | secure_firewall_management_center | 2.9.14.14 |
| cisco | secure_firewall_management_center | 2.9.15 |
| cisco | secure_firewall_management_center | 2.9.16 |
| cisco | secure_firewall_management_center | 2.9.17 |
| snort | snort | 𝑥 < 2.9.14 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
- CWE-670 - Always-Incorrect Control Flow ImplementationThe code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.
- CWE-670 - Always-Incorrect Control Flow ImplementationThe code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated.
References