CVE-2021-34790

27.10.2021, 19:15

Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized connections with a host located behind the ALG. For more information about these vulnerabilities, see the Details section of this advisory. Note: These vulnerabilities have been publicly discussed as NAT Slipstreaming.

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	4.7 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
cisco	CNA	4.7 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 63%

Vendor	Product	Version
cisco	adaptive_security_appliance	𝑥 < 9.8.4.40
cisco	firepower_threat_defense	𝑥 < 6.4.0.12
cisco	firepower_threat_defense	6.5.0 ≤ 𝑥 < 6.6.5
cisco	firepower_threat_defense	6.7.0 ≤ 𝑥 < 6.7.0.2
cisco	adaptive_security_appliance_software	9.12.0 ≤ 𝑥 < 9.12.4.29
cisco	adaptive_security_appliance_software	9.13.0 ≤ 𝑥 < 9.14.2.15
cisco	adaptive_security_appliance_software	9.15.0 ≤ 𝑥 < 9.15.1.15
cisco	asa_5512-x_firmware	009.008
cisco	asa_5512-x_firmware	009.015
cisco	asa_5505_firmware	009.008
cisco	asa_5505_firmware	009.015
cisco	asa_5515-x_firmware	009.008
cisco	asa_5515-x_firmware	009.015
cisco	asa_5525-x_firmware	009.008
cisco	asa_5525-x_firmware	009.015
cisco	asa_5545-x_firmware	009.008
cisco	asa_5545-x_firmware	009.015
cisco	asa_5555-x_firmware	009.008
cisco	asa_5555-x_firmware	009.015
cisco	asa_5580_firmware	009.008
cisco	asa_5580_firmware	009.015
cisco	asa_5585-x_firmware	009.008
cisco	asa_5585-x_firmware	009.015

𝑥

= Vulnerable software versions

Common Weakness Enumeration

References

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-natalg-bypass-cpKGqkng