Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit this vulnerability by sending crafted packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network.
References
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
26 Nov 2024, 16:09
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:cisco:firepower_management_center:2.9.14.14:*:*:*:*:*:*:* cpe:2.3:a:cisco:firepower_management_center:2.9.16:*:*:*:*:*:*:* cpe:2.3:a:cisco:firepower_management_center:2.9.14.0:*:*:*:*:*:*:* cpe:2.3:a:cisco:firepower_management_center:2.9.17:*:*:*:*:*:*:* |
cpe:2.3:a:cisco:secure_firewall_management_center:2.9.17:*:*:*:*:*:*:* cpe:2.3:a:cisco:secure_firewall_management_center:2.9.14.0:*:*:*:*:*:*:* cpe:2.3:a:cisco:secure_firewall_management_center:2.9.15:*:*:*:*:*:*:* cpe:2.3:a:cisco:secure_firewall_management_center:2.9.16:*:*:*:*:*:*:* cpe:2.3:a:cisco:secure_firewall_management_center:2.9.14.14:*:*:*:*:*:*:* |
| First Time |
Cisco secure Firewall Management Center
|
21 Nov 2024, 05:43
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://lists.debian.org/debian-lts-announce/2023/02/msg00011.html - | |
| References | () https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-app-bypass-cSBYCATq - Vendor Advisory | |
| References | () https://www.debian.org/security/2023/dsa-5354 - |
22 May 2023, 18:57
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:cisco:isr_4321:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr_1100-8p:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr_1109-2p:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr_1111x-8p:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr_4351:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr_4221:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr_1100-4p:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr_4431:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr_4451-x:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr_1109-4p:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr_4331:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:isr_1101-4p:-:*:*:*:*:*:*:* |
cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:4451-x_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:* cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:* |
19 Feb 2023, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2021-01-13 22:15
Updated : 2024-11-26 16:09
NVD link : CVE-2021-1236
Mitre link : CVE-2021-1236
CVE.ORG link : CVE-2021-1236
JSON object : View
Products Affected
cisco
- 1111x-8p_integrated_services_router
- 1100-4p_integrated_services_router
- csr_1000v
- isa_3000
- 1109-4p_integrated_services_router
- 1109-2p_integrated_services_router
- 4321_integrated_services_router
- ios_xe
- secure_firewall_management_center
- 1100-8p_integrated_services_router
- 4221_integrated_services_router
- 4451-x_integrated_services_router
- 4461_integrated_services_router
- 1101-4p_integrated_services_router
- 4351_integrated_services_router
- 4431_integrated_services_router
- firepower_threat_defense
- 4331_integrated_services_router
snort
- snort
CWE
CWE-670
Always-Incorrect Control Flow Implementation