A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper input validation when parsing HTTPS requests. An attacker could exploit this vulnerability by sending a malicious HTTPS request to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
References
| Link | Resource |
|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asafdt-webvpn-dos-KSqJAKPA | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
16 Aug 2023, 16:18
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:* |
26 Jun 2023, 19:00
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-787 |
19 Jan 2022, 15:47
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:* cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:* cpe:2.3:a:cisco:firepower_threat_defense:7.0.0:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 7.1
v3 : 7.5 |
| CWE | CWE-444 | |
| References | (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asafdt-webvpn-dos-KSqJAKPA - Vendor Advisory |
11 Jan 2022, 19:38
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-01-11 19:15
Updated : 2024-02-04 22:08
NVD link : CVE-2021-34704
Mitre link : CVE-2021-34704
CVE.ORG link : CVE-2021-34704
JSON object : View
Products Affected
cisco
- adaptive_security_appliance_software
- firepower_threat_defense