Lucene search

K
nvd[email protected]NVD:CVE-2021-34754
HistoryOct 27, 2021 - 7:15 p.m.

CVE-2021-34754

2021-10-2719:15:07
CWE-284
web.nvd.nist.gov
6
cve-2021-34754
cisco firepower threat defense
ethernet industrial protocol
remote attacker
access control
intrusion policies

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

50.1%

Multiple vulnerabilities in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured rules for ENIP traffic. These vulnerabilities are due to incomplete processing during deep packet inspection for ENIP packets. An attacker could exploit these vulnerabilities by sending a crafted ENIP packet to the targeted interface. A successful exploit could allow the attacker to bypass configured access control and intrusion policies that should be activated for the ENIP packet.

Affected configurations

Nvd
Node
ciscofirepower_management_centerMatch2.9.12
OR
ciscofirepower_management_centerMatch2.9.14.0
OR
ciscofirepower_management_centerMatch2.9.16
OR
ciscofirepower_management_centerMatch2.9.17
OR
ciscofirepower_management_centerMatch2.9.18
OR
ciscofirepower_threat_defenseRange6.4.06.4.0.13
OR
ciscofirepower_threat_defenseRange6.6.06.6.5.1
OR
ciscofirepower_threat_defenseRange6.7.06.7.0.3
OR
ciscofirepower_threat_defenseRange7.0.07.0.1
VendorProductVersionCPE
ciscofirepower_management_center2.9.12cpe:2.3:a:cisco:firepower_management_center:2.9.12:*:*:*:*:*:*:*
ciscofirepower_management_center2.9.14.0cpe:2.3:a:cisco:firepower_management_center:2.9.14.0:*:*:*:*:*:*:*
ciscofirepower_management_center2.9.16cpe:2.3:a:cisco:firepower_management_center:2.9.16:*:*:*:*:*:*:*
ciscofirepower_management_center2.9.17cpe:2.3:a:cisco:firepower_management_center:2.9.17:*:*:*:*:*:*:*
ciscofirepower_management_center2.9.18cpe:2.3:a:cisco:firepower_management_center:2.9.18:*:*:*:*:*:*:*
ciscofirepower_threat_defense*cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

50.1%

Related for NVD:CVE-2021-34754