5.3

CVE-2021-34790

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities

Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized connections with a host located behind the ALG. For more information about these vulnerabilities, see the Details section of this advisory. Note: These vulnerabilities have been publicly discussed as NAT Slipstreaming.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Adaptive Security Appliance Version < 9.8.4.40
Cisco ≫ Secure Firewall Threat Defense Version < 6.4.0.12
Cisco ≫ Secure Firewall Threat Defense Version >= 6.5.0 < 6.6.5
Cisco ≫ Secure Firewall Threat Defense Version >= 6.7.0 < 6.7.0.2
Cisco ≫ Adaptive Security Appliance Software Version >= 9.12.0 < 9.12.4.29
Cisco ≫ Adaptive Security Appliance Software Version >= 9.13.0 < 9.14.2.15
Cisco ≫ Adaptive Security Appliance Software Version >= 9.15.0 < 9.15.1.15
Cisco ≫ Asa 5512-x Firmware Version 009.008
   Cisco ≫ Asa 5512-x Version -
Cisco ≫ Asa 5512-x Firmware Version 009.015
   Cisco ≫ Asa 5512-x Version -
Cisco ≫ Asa 5505 Firmware Version 009.008
   Cisco ≫ Asa 5505 Version -
Cisco ≫ Asa 5505 Firmware Version 009.015
   Cisco ≫ Asa 5505 Version -
Cisco ≫ Asa 5515-x Firmware Version 009.008
   Cisco ≫ Asa 5515-x Version -
Cisco ≫ Asa 5515-x Firmware Version 009.015
   Cisco ≫ Asa 5515-x Version -
Cisco ≫ Asa 5525-x Firmware Version 009.008
   Cisco ≫ Asa 5525-x Version -
Cisco ≫ Asa 5525-x Firmware Version 009.015
   Cisco ≫ Asa 5525-x Version -
Cisco ≫ Asa 5545-x Firmware Version 009.008
   Cisco ≫ Asa 5545-x Version -
Cisco ≫ Asa 5545-x Firmware Version 009.015
   Cisco ≫ Asa 5545-x Version -
Cisco ≫ Asa 5555-x Firmware Version 009.008
   Cisco ≫ Asa 5555-x Version -
Cisco ≫ Asa 5555-x Firmware Version 009.015
   Cisco ≫ Asa 5555-x Version -
Cisco ≫ Asa 5580 Firmware Version 009.008
   Cisco ≫ Asa 5580 Version -
Cisco ≫ Asa 5580 Firmware Version 009.015
   Cisco ≫ Asa 5580 Version -
Cisco ≫ Asa 5585-x Firmware Version 009.008
   Cisco ≫ Asa 5585-x Version -
Cisco ≫ Asa 5585-x Firmware Version 009.015
   Cisco ≫ Asa 5585-x Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.14% 0.64
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Cisco PSIRT 4.7 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

CWE-358 Improperly Implemented Security Check for Standard

The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-natalg-bypass-cpKGqkng
Vendor Advisory