Vulnerability Details : CVE-2021-40117
A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because incoming SSL/TLS packets are not properly processed. An attacker could exploit this vulnerability by sending a crafted SSL/TLS packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Vulnerability category: OverflowDenial of service
Products affected by CVE-2021-40117
- cpe:2.3:a:cisco:adaptive_security_appliance:*:*:*:*:*:*:*:*
- Cisco » Adaptive Security Appliance SoftwareVersions from including (>=) 9.15.0 and before (<) 9.15.1.17cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
- Cisco » Adaptive Security Appliance SoftwareVersions from including (>=) 9.9.0 and before (<) 9.12.4.26cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
- Cisco » Adaptive Security Appliance SoftwareVersions from including (>=) 9.16.0 and before (<) 9.16.2.3cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
- Cisco » Adaptive Security Appliance SoftwareVersions from including (>=) 9.13.0 and before (<) 9.14.3.9cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
- cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:asa_5505_firmware:009.009\(002.085\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:asa_5505_firmware:009.014\(002.106\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:asa_5512-x_firmware:009.009\(002.085\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:asa_5512-x_firmware:009.014\(002.106\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:asa_5515-x_firmware:009.009\(002.085\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:asa_5515-x_firmware:009.014\(002.106\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:asa_5525-x_firmware:009.009\(002.085\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:asa_5525-x_firmware:009.014\(002.106\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:asa_5545-x_firmware:009.009\(002.085\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:asa_5545-x_firmware:009.014\(002.106\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:asa_5555-x_firmware:009.009\(002.085\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:asa_5555-x_firmware:009.014\(002.106\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:asa_5580_firmware:009.009\(002.085\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:asa_5580_firmware:009.014\(002.106\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:asa_5585-x_firmware:009.009\(002.085\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:asa_5585-x_firmware:009.014\(002.106\):*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-40117
0.16%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 53 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-40117
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.8
|
HIGH | AV:N/AC:L/Au:N/C:N/I:N/A:C |
10.0
|
6.9
|
NIST | |
|
8.6
|
HIGH | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
3.9
|
4.0
|
Cisco Systems, Inc. | |
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST |
CWE ids for CVE-2021-40117
-
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.Assigned by: ykramarz@cisco.com (Secondary)
-
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.Assigned by: nvd@nist.gov (Primary)
References for CVE-2021-40117
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-dos-4ygzLKU9
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service VulnerabilityVendor Advisory
Jump to