Lucene search

CiscoCISCO-SA-HTTP-FP-BP-KFDDCQHC

HistoryApr 28, 2021 - 4:00 p.m.

Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerabilities

2021-04-2816:00:00

tools.cisco.com

cisco

products

snort

http

bypass

vulnerabilities

remote attacker

file policy

EPSS

0.001

Percentile

48.0%

JSON

Multiple Cisco products are affected by vulnerabilities in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP.

These vulnerabilities are due to incorrect handling of specific HTTP header parameters. An attacker could exploit these vulnerabilities by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass a configured file policy for HTTP packets and deliver a malicious payload.

Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http-fp-bp-KfDdcQhc [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http-fp-bp-KfDdcQhc”]

Affected configurations

Vulners

Node

ciscofirepower_threat_defense_softwareMatch6.2

ciscofirepower_threat_defense_softwareMatch6.6

ciscofirepower_threat_defense_softwareMatch6.4

ciscofirepower_threat_defense_softwareMatch6.7

ciscofirepower_2100_firmwareMatchany

ciscofirepower_management_center_1000_firmwareMatchany

ciscoindustrial_security_appliances_3000_firmwareMatchany

ciscofirepower_9000_firmwareMatchany

ciscofirepower_4100_next-generation_firewall_firmwareMatchany

ciscounified_threat_defenseMatchany

ciscofirepower_threat_defense_softwareMatchany

ciscoips_sensor_softwareMatchany

ciscofirepower_threat_defense_softwareMatch6.2.3

ciscofirepower_threat_defense_softwareMatch6.2.3.1

ciscofirepower_threat_defense_softwareMatch6.2.3.2

ciscofirepower_threat_defense_softwareMatch6.2.3.3

ciscofirepower_threat_defense_softwareMatch6.2.3.4

ciscofirepower_threat_defense_softwareMatch6.2.3.5

ciscofirepower_threat_defense_softwareMatch6.2.3.6

ciscofirepower_threat_defense_softwareMatch6.2.3.7

ciscofirepower_threat_defense_softwareMatch6.2.3.8

ciscofirepower_threat_defense_softwareMatch6.2.3.10

ciscofirepower_threat_defense_softwareMatch6.2.3.11

ciscofirepower_threat_defense_softwareMatch6.2.3.9

ciscofirepower_threat_defense_softwareMatch6.2.3.12

ciscofirepower_threat_defense_softwareMatch6.2.3.13

ciscofirepower_threat_defense_softwareMatch6.2.3.14

ciscofirepower_threat_defense_softwareMatch6.2.3.15

ciscofirepower_threat_defense_softwareMatch6.2.3.16

ciscofirepower_threat_defense_softwareMatch6.6.0

ciscofirepower_threat_defense_softwareMatch6.6.0.1

ciscofirepower_threat_defense_softwareMatch6.6.1

ciscofirepower_threat_defense_softwareMatch6.4.0

ciscofirepower_threat_defense_softwareMatch6.4.0.1

ciscofirepower_threat_defense_softwareMatch6.4.0.3

ciscofirepower_threat_defense_softwareMatch6.4.0.2

ciscofirepower_threat_defense_softwareMatch6.4.0.4

ciscofirepower_threat_defense_softwareMatch6.4.0.5

ciscofirepower_threat_defense_softwareMatch6.4.0.6

ciscofirepower_threat_defense_softwareMatch6.4.0.7

ciscofirepower_threat_defense_softwareMatch6.4.0.8

ciscofirepower_threat_defense_softwareMatch6.4.0.9

ciscofirepower_threat_defense_softwareMatch6.4.0.10

ciscofirepower_threat_defense_softwareMatch6.4.0.11

ciscofirepower_threat_defense_softwareMatch6.7.0

ciscofirepower_threat_defense_softwareMatch6.7.0.1

ciscofirepower_threat_defense_softwareMatch2100_series

ciscofirepower_threat_defense_softwareMatch1000_series

ciscofirepower_threat_defense_softwareMatch3000_series_industrial_security_appliances_\(isa\)

ciscofirepower_threat_defense_softwareMatch9000_series