Lucene search

CiscoCVE-2021-34754

HistoryOct 27, 2021 - 7:15 p.m.

CVE-2021-34754

2021-10-2719:15:07

CWE-284

cisco

web.nvd.nist.gov

cisco

firepower

threat defense

software

cve-2021-34754

enip

vulnerability

bypass

remote attacker

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

50.1%

JSON

Multiple vulnerabilities in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured rules for ENIP traffic. These vulnerabilities are due to incomplete processing during deep packet inspection for ENIP packets. An attacker could exploit these vulnerabilities by sending a crafted ENIP packet to the targeted interface. A successful exploit could allow the attacker to bypass configured access control and intrusion policies that should be activated for the ENIP packet.

Affected configurations

Nvd

Node

ciscofirepower_management_centerMatch2.9.12

ciscofirepower_management_centerMatch2.9.14.0

ciscofirepower_management_centerMatch2.9.16

ciscofirepower_management_centerMatch2.9.17

ciscofirepower_management_centerMatch2.9.18

ciscofirepower_threat_defenseRange6.4.0–6.4.0.13

ciscofirepower_threat_defenseRange6.6.0–6.6.5.1

ciscofirepower_threat_defenseRange6.7.0–6.7.0.3

ciscofirepower_threat_defenseRange7.0.0–7.0.1

VendorProductVersionCPE
ciscofirepower_management_center2.9.12cpe:2.3:a:cisco:firepower_management_center:2.9.12:*:*:*:*:*:*:*
ciscofirepower_management_center2.9.14.0cpe:2.3:a:cisco:firepower_management_center:2.9.14.0:*:*:*:*:*:*:*
ciscofirepower_management_center2.9.16cpe:2.3:a:cisco:firepower_management_center:2.9.16:*:*:*:*:*:*:*
ciscofirepower_management_center2.9.17cpe:2.3:a:cisco:firepower_management_center:2.9.17:*:*:*:*:*:*:*
ciscofirepower_management_center2.9.18cpe:2.3:a:cisco:firepower_management_center:2.9.18:*:*:*:*:*:*:*
ciscofirepower_threat_defense*cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	firepower_management_center	2.9.12	cpe:2.3:a:cisco:firepower_management_center:2.9.12:::::::*
cisco	firepower_management_center	2.9.14.0	cpe:2.3:a:cisco:firepower_management_center:2.9.14.0:::::::*
cisco	firepower_management_center	2.9.16	cpe:2.3:a:cisco:firepower_management_center:2.9.16:::::::*
cisco	firepower_management_center	2.9.17	cpe:2.3:a:cisco:firepower_management_center:2.9.17:::::::*
cisco	firepower_management_center	2.9.18	cpe:2.3:a:cisco:firepower_management_center:2.9.18:::::::*
cisco	firepower_threat_defense	*	cpe:2.3:a:cisco:firepower_threat_defense::::::::

CNA Affected

[
  {
    "product": "Cisco Firepower Threat Defense Software",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-enip-bypass-eFsxd8KP

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

50.1%

JSON

Related for CVE-2021-34754