ID
VAR-202110-1286
CVE
CVE-2021-34754
TITLE
Cisco Firepower Threat Defense Software vulnerabilities
Trust: 0.8
sources:
JVNDB: JVNDB-2021-018437
DESCRIPTION
Multiple vulnerabilities in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured rules for ENIP traffic. These vulnerabilities are due to incomplete processing during deep packet inspection for ENIP packets. An attacker could exploit these vulnerabilities by sending a crafted ENIP packet to the targeted interface. A successful exploit could allow the attacker to bypass configured access control and intrusion policies that should be activated for the ENIP packet. Cisco Firepower Threat Defense (FTD) There are unspecified vulnerabilities in the software.Information may be tampered with
Trust: 1.71
sources:
NVD: CVE-2021-34754 //
JVNDB: JVNDB-2021-018437 //
VULHUB: VHN-394996
AFFECTED PRODUCTS
| vendor: | cisco | model: | secure firewall management center | scope: | eq | version: | 2.9.18 | Trust: 1.0 |
| vendor: | cisco | model: | secure firewall management center | scope: | eq | version: | 2.9.17 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | lt | version: | 7.0.1 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | gte | version: | 7.0.0 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | gte | version: | 6.4.0 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | gte | version: | 6.7.0 | Trust: 1.0 |
| vendor: | cisco | model: | secure firewall management center | scope: | eq | version: | 2.9.14.0 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | lt | version: | 6.4.0.13 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | lt | version: | 6.6.5.1 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | gte | version: | 6.6.0 | Trust: 1.0 |
| vendor: | cisco | model: | secure firewall management center | scope: | eq | version: | 2.9.12 | Trust: 1.0 |
| vendor: | cisco | model: | firepower threat defense | scope: | lt | version: | 6.7.0.3 | Trust: 1.0 |
| vendor: | cisco | model: | secure firewall management center | scope: | eq | version: | 2.9.16 | Trust: 1.0 |
| vendor: | シスコシステムズ | model: | cisco firepower threat defense ソフトウェア | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco firepower management center | scope: | - | version: | - | Trust: 0.8 |
sources:
JVNDB: JVNDB-2021-018437 //
NVD: CVE-2021-34754
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
sources:
VULHUB: VHN-394996 //
JVNDB: JVNDB-2021-018437 //
CNNVD: CNNVD-202110-1989 //
NVD: CVE-2021-34754 //
NVD: CVE-2021-34754
PROBLEMTYPE DATA
| problemtype: | NVD-CWE-Other | Trust: 1.0 |
| problemtype: | CWE-284 | Trust: 1.0 |
| problemtype: | others (CWE-Other) [NVD evaluation ] | Trust: 0.8 |
sources:
JVNDB: JVNDB-2021-018437 //
NVD: CVE-2021-34754
THREAT TYPE
remote
Trust: 0.6
sources:
CNNVD: CNNVD-202110-1989
TYPE
access control error
Trust: 0.6
sources:
CNNVD: CNNVD-202110-1989
PATCH
| title: | cisco-sa-ftd-enip-bypass-eFsxd8KP | url: | https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-enip-bypass-eFsxd8KP | Trust: 0.8 |
| title: | Cisco Firepower Threat Defense Fixes for access control error vulnerabilities | url: | http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=168742 | Trust: 0.6 |
sources:
JVNDB: JVNDB-2021-018437 //
CNNVD: CNNVD-202110-1989
EXTERNAL IDS
| db: | NVD | id: | CVE-2021-34754 | Trust: 3.3 |
| db: | JVNDB | id: | JVNDB-2021-018437 | Trust: 0.8 |
| db: | CNNVD | id: | CNNVD-202110-1989 | Trust: 0.7 |
| db: | AUSCERT | id: | ESB-2021.3597 | Trust: 0.6 |
| db: | CS-HELP | id: | SB2021102909 | Trust: 0.6 |
| db: | VULHUB | id: | VHN-394996 | Trust: 0.1 |
sources:
VULHUB: VHN-394996 //
JVNDB: JVNDB-2021-018437 //
CNNVD: CNNVD-202110-1989 //
NVD: CVE-2021-34754
REFERENCES
| url: | https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-ftd-enip-bypass-efsxd8kp | Trust: 2.3 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2021-34754 | Trust: 1.4 |
| url: | https://www.auscert.org.au/bulletins/esb-2021.3597 | Trust: 0.6 |
| url: | https://www.cybersecurity-help.cz/vdb/sb2021102909 | Trust: 0.6 |
sources:
VULHUB: VHN-394996 //
JVNDB: JVNDB-2021-018437 //
CNNVD: CNNVD-202110-1989 //
NVD: CVE-2021-34754
SOURCES
| db: | VULHUB | id: | VHN-394996 |
| db: | JVNDB | id: | JVNDB-2021-018437 |
| db: | CNNVD | id: | CNNVD-202110-1989 |
| db: | NVD | id: | CVE-2021-34754 |
LAST UPDATE DATE
2024-11-27T22:42:11.693000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-394996 | date: | 2021-10-28T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-018437 | date: | 2023-06-15T01:20:00 |
| db: | CNNVD | id: | CNNVD-202110-1989 | date: | 2021-11-05T00:00:00 |
| db: | NVD | id: | CVE-2021-34754 | date: | 2024-11-26T16:09:02.407 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-394996 | date: | 2021-10-27T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-018437 | date: | 2023-06-15T00:00:00 |
| db: | CNNVD | id: | CNNVD-202110-1989 | date: | 2021-10-27T00:00:00 |
| db: | NVD | id: | CVE-2021-34754 | date: | 2021-10-27T19:15:07.820 |