Details of VAR-202110-1393

ID

VAR-202110-1393

CVE

CVE-2021-34790

TITLE

Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Input verification vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2021-014291

DESCRIPTION

Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized connections with a host located behind the ALG. For more information about these vulnerabilities, see the Details section of this advisory. Note: These vulnerabilities have been publicly discussed as NAT Slipstreaming

Trust: 1.71

sources: NVD: CVE-2021-34790 // JVNDB: JVNDB-2021-014291 // VULHUB: VHN-395032

AFFECTED PRODUCTS

vendor:	cisco	model:	adaptive security appliance software	scope:	gte	version:	9.15.0	Trust: 1.0
vendor:	cisco	model:	asa 5512-x	scope:	eq	version:	009.015	Trust: 1.0
vendor:	cisco	model:	asa 5505	scope:	eq	version:	009.008	Trust: 1.0
vendor:	cisco	model:	adaptive security appliance software	scope:	lt	version:	9.14.2.15	Trust: 1.0
vendor:	cisco	model:	asa 5512-x	scope:	eq	version:	009.008	Trust: 1.0
vendor:	cisco	model:	asa 5545-x	scope:	eq	version:	009.015	Trust: 1.0
vendor:	cisco	model:	asa 5545-x	scope:	eq	version:	009.008	Trust: 1.0
vendor:	cisco	model:	firepower threat defense	scope:	lt	version:	6.4.0.12	Trust: 1.0
vendor:	cisco	model:	firepower threat defense	scope:	lt	version:	6.7.0.2	Trust: 1.0
vendor:	cisco	model:	asa 5585-x	scope:	eq	version:	009.015	Trust: 1.0
vendor:	cisco	model:	firepower threat defense	scope:	gte	version:	6.5.0	Trust: 1.0
vendor:	cisco	model:	adaptive security appliance software	scope:	lt	version:	9.12.4.29	Trust: 1.0
vendor:	cisco	model:	firepower threat defense	scope:	lt	version:	6.6.5	Trust: 1.0
vendor:	cisco	model:	asa 5555-x	scope:	eq	version:	009.015	Trust: 1.0
vendor:	cisco	model:	asa 5585-x	scope:	eq	version:	009.008	Trust: 1.0
vendor:	cisco	model:	firepower threat defense	scope:	gte	version:	6.7.0	Trust: 1.0
vendor:	cisco	model:	asa 5515-x	scope:	eq	version:	009.015	Trust: 1.0
vendor:	cisco	model:	asa 5555-x	scope:	eq	version:	009.008	Trust: 1.0
vendor:	cisco	model:	adaptive security appliance	scope:	lt	version:	9.8.4.40	Trust: 1.0
vendor:	cisco	model:	adaptive security appliance software	scope:	gte	version:	9.12.0	Trust: 1.0
vendor:	cisco	model:	asa 5515-x	scope:	eq	version:	009.008	Trust: 1.0
vendor:	cisco	model:	asa 5580	scope:	eq	version:	009.015	Trust: 1.0
vendor:	cisco	model:	adaptive security appliance software	scope:	lt	version:	9.15.1.15	Trust: 1.0
vendor:	cisco	model:	asa 5525-x	scope:	eq	version:	009.015	Trust: 1.0
vendor:	cisco	model:	asa 5580	scope:	eq	version:	009.008	Trust: 1.0
vendor:	cisco	model:	adaptive security appliance software	scope:	gte	version:	9.13.0	Trust: 1.0
vendor:	cisco	model:	asa 5525-x	scope:	eq	version:	009.008	Trust: 1.0
vendor:	cisco	model:	asa 5505	scope:	eq	version:	009.015	Trust: 1.0
vendor:	シスコシステムズ	model:	asa 5512-x	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	cisco adaptive security appliance ソフトウェア	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	asa 5505	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	asa 5525-x	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	asa 5545-x	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	asa 5585-x	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	cisco firepower threat defense ソフトウェア	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	asa 5515-x	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	asa 5580	scope:	-	version:	-	Trust: 0.8
vendor:	シスコシステムズ	model:	asa 5555-x	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2021-014291 // NVD: CVE-2021-34790

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2021-34790
value:	MEDIUM
Trust: 1.0
ykramarz@cisco.com:	CVE-2021-34790
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2021-34790
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-202110-1919
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-395032
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2021-34790
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-395032
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2021-34790
baseSeverity:	MEDIUM
baseScore:	5.3
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	1.4
version:	3.1
Trust: 1.0
ykramarz@cisco.com:	CVE-2021-34790
baseSeverity:	MEDIUM
baseScore:	4.7
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	NONE
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	2.8
impactScore:	1.4
version:	3.1
Trust: 1.0
NVD:	CVE-2021-34790
baseSeverity:	MEDIUM
baseScore:	5.3
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULHUB: VHN-395032 // JVNDB: JVNDB-2021-014291 // CNNVD: CNNVD-202110-1919 // NVD: CVE-2021-34790 // NVD: CVE-2021-34790

PROBLEMTYPE DATA

problemtype:	CWE-20	Trust: 1.1
problemtype:	CWE-358	Trust: 1.0
problemtype:	Inappropriate input confirmation (CWE-20) [NVD evaluation ]	Trust: 0.8

sources: VULHUB: VHN-395032 // JVNDB: JVNDB-2021-014291 // NVD: CVE-2021-34790

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202110-1919

TYPE

input validation error

Trust: 0.6

sources: CNNVD: CNNVD-202110-1919

PATCH

title:	cisco-sa-natalg-bypass-cpKGqkng	url:	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-natalg-bypass-cpKGqkng	Trust: 0.8
title:	Cisco Firepower Threat Defense and Cisco Adaptive Security Appliances Software Enter the fix for the verification error vulnerability	url:	http://123.124.177.30/web/xxk/bdxqById.tag?id=168143	Trust: 0.6

sources: JVNDB: JVNDB-2021-014291 // CNNVD: CNNVD-202110-1919

EXTERNAL IDS

db:	NVD	id:	CVE-2021-34790	Trust: 3.3
db:	JVNDB	id:	JVNDB-2021-014291	Trust: 0.8
db:	CS-HELP	id:	SB2021102916	Trust: 0.6
db:	AUSCERT	id:	ESB-2021.3582	Trust: 0.6
db:	CNNVD	id:	CNNVD-202110-1919	Trust: 0.6
db:	VULHUB	id:	VHN-395032	Trust: 0.1

sources: VULHUB: VHN-395032 // JVNDB: JVNDB-2021-014291 // CNNVD: CNNVD-202110-1919 // NVD: CVE-2021-34790

REFERENCES

url:	https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-natalg-bypass-cpkgqkng	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2021-34790	Trust: 1.4
url:	https://www.auscert.org.au/bulletins/esb-2021.3582	Trust: 0.6
url:	https://vigilance.fr/vulnerability/cisco-asa-ingress-filtrering-bypass-via-application-level-gateway-36741	Trust: 0.6
url:	https://www.cybersecurity-help.cz/vdb/sb2021102916	Trust: 0.6

sources: VULHUB: VHN-395032 // JVNDB: JVNDB-2021-014291 // CNNVD: CNNVD-202110-1919 // NVD: CVE-2021-34790

SOURCES

db:	VULHUB	id:	VHN-395032
db:	JVNDB	id:	JVNDB-2021-014291
db:	CNNVD	id:	CNNVD-202110-1919
db:	NVD	id:	CVE-2021-34790

LAST UPDATE DATE

2024-08-14T13:53:52.245000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-395032	date:	2022-10-27T00:00:00
db:	JVNDB	id:	JVNDB-2021-014291	date:	2022-10-12T07:17:00
db:	CNNVD	id:	CNNVD-202110-1919	date:	2022-10-28T00:00:00
db:	NVD	id:	CVE-2021-34790	date:	2023-11-07T03:36:25.667

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-395032	date:	2021-10-27T00:00:00
db:	JVNDB	id:	JVNDB-2021-014291	date:	2022-10-12T00:00:00
db:	CNNVD	id:	CNNVD-202110-1919	date:	2021-10-27T00:00:00
db:	NVD	id:	CVE-2021-34790	date:	2021-10-27T19:15:08.400