CVE-2021-1224
Multiple Cisco Products Snort TCP Fast Open File Policy Bypass Vulnerability
Severity Score
5.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect detection of the HTTP payload if it is contained at least partially within the TFO connection handshake. An attacker could exploit this vulnerability by sending crafted TFO packets with an HTTP payload through an affected device. A successful exploit could allow the attacker to bypass configured file policy for HTTP packets and deliver a malicious payload.
Múltiples productos de Cisco están afectados por una vulnerabilidad con TCP Fast Open (TFO) cuando se usan en conjunto con el motor de detección Snort que podría permitir a un atacante remoto no autenticado omitir una política de archivos configurada para HTTP. La vulnerabilidad es debido a la detección incorrecta de la carga útil HTTP si está contenida al menos parcialmente dentro del protocolo de enlace de la conexión TFO. Un atacante podría explotar esta vulnerabilidad mediante el envío de paquetes TFO diseñados con una carga útil HTTP a través de un dispositivo afectado. Una explotación con éxito podría permitir al atacante omitir la política de archivos configurada para paquetes HTTP y entregar una carga útil maliciosa.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-11-13 CVE Reserved
- 2021-01-13 CVE Published
- 2024-11-02 EPSS Updated
- 2024-11-12 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-693: Protection Mechanism Failure
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://lists.debian.org/debian-lts-announce/2023/02/msg00011.html | Mailing List |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | < 17.4.1 Search vendor "Cisco" for product "Ios Xe" and version " < 17.4.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | 1100-4p Integrated Services Router Search vendor "Cisco" for product "1100-4p Integrated Services Router" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | < 17.4.1 Search vendor "Cisco" for product "Ios Xe" and version " < 17.4.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | 1100-8p Integrated Services Router Search vendor "Cisco" for product "1100-8p Integrated Services Router" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | < 17.4.1 Search vendor "Cisco" for product "Ios Xe" and version " < 17.4.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | 1101-4p Integrated Services Router Search vendor "Cisco" for product "1101-4p Integrated Services Router" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | < 17.4.1 Search vendor "Cisco" for product "Ios Xe" and version " < 17.4.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | 1109-2p Integrated Services Router Search vendor "Cisco" for product "1109-2p Integrated Services Router" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | < 17.4.1 Search vendor "Cisco" for product "Ios Xe" and version " < 17.4.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | 1109-4p Integrated Services Router Search vendor "Cisco" for product "1109-4p Integrated Services Router" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | < 17.4.1 Search vendor "Cisco" for product "Ios Xe" and version " < 17.4.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | 1111x-8p Integrated Services Router Search vendor "Cisco" for product "1111x-8p Integrated Services Router" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | < 17.4.1 Search vendor "Cisco" for product "Ios Xe" and version " < 17.4.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | 4221 Integrated Services Router Search vendor "Cisco" for product "4221 Integrated Services Router" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | < 17.4.1 Search vendor "Cisco" for product "Ios Xe" and version " < 17.4.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | 4321 Integrated Services Router Search vendor "Cisco" for product "4321 Integrated Services Router" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | < 17.4.1 Search vendor "Cisco" for product "Ios Xe" and version " < 17.4.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | 4331 Integrated Services Router Search vendor "Cisco" for product "4331 Integrated Services Router" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | < 17.4.1 Search vendor "Cisco" for product "Ios Xe" and version " < 17.4.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | 4351 Integrated Services Router Search vendor "Cisco" for product "4351 Integrated Services Router" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | < 17.4.1 Search vendor "Cisco" for product "Ios Xe" and version " < 17.4.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | 4431 Integrated Services Router Search vendor "Cisco" for product "4431 Integrated Services Router" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | < 17.4.1 Search vendor "Cisco" for product "Ios Xe" and version " < 17.4.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | 4451-x Integrated Services Router Search vendor "Cisco" for product "4451-x Integrated Services Router" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | < 17.4.1 Search vendor "Cisco" for product "Ios Xe" and version " < 17.4.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | 4461 Integrated Services Router Search vendor "Cisco" for product "4461 Integrated Services Router" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | < 17.4.1 Search vendor "Cisco" for product "Ios Xe" and version " < 17.4.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Csr 1000v Search vendor "Cisco" for product "Csr 1000v" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | < 17.4.1 Search vendor "Cisco" for product "Ios Xe" and version " < 17.4.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Isa 3000 Search vendor "Cisco" for product "Isa 3000" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Meraki Mx64 Firmware Search vendor "Cisco" for product "Meraki Mx64 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Meraki Mx64 Search vendor "Cisco" for product "Meraki Mx64" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Meraki Mx64w Firmware Search vendor "Cisco" for product "Meraki Mx64w Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Meraki Mx64w Search vendor "Cisco" for product "Meraki Mx64w" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Meraki Mx67 Firmware Search vendor "Cisco" for product "Meraki Mx67 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Meraki Mx67 Search vendor "Cisco" for product "Meraki Mx67" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Meraki Mx67c Firmware Search vendor "Cisco" for product "Meraki Mx67c Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Meraki Mx67c Search vendor "Cisco" for product "Meraki Mx67c" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Meraki Mx67w Firmware Search vendor "Cisco" for product "Meraki Mx67w Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Meraki Mx67w Search vendor "Cisco" for product "Meraki Mx67w" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Meraki Mx68 Firmware Search vendor "Cisco" for product "Meraki Mx68 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Meraki Mx68 Search vendor "Cisco" for product "Meraki Mx68" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Meraki Mx68cw Firmware Search vendor "Cisco" for product "Meraki Mx68cw Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Meraki Mx68cw Search vendor "Cisco" for product "Meraki Mx68cw" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Meraki Mx68w Firmware Search vendor "Cisco" for product "Meraki Mx68w Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Meraki Mx68w Search vendor "Cisco" for product "Meraki Mx68w" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Meraki Mx100 Firmware Search vendor "Cisco" for product "Meraki Mx100 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Meraki Mx100 Search vendor "Cisco" for product "Meraki Mx100" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Meraki Mx84 Firmware Search vendor "Cisco" for product "Meraki Mx84 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Meraki Mx84 Search vendor "Cisco" for product "Meraki Mx84" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Meraki Mx250 Firmware Search vendor "Cisco" for product "Meraki Mx250 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Meraki Mx250 Search vendor "Cisco" for product "Meraki Mx250" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Meraki Mx450 Firmware Search vendor "Cisco" for product "Meraki Mx450 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Meraki Mx450 Search vendor "Cisco" for product "Meraki Mx450" | - | - |
Safe
|
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 2.9.14.0 Search vendor "Cisco" for product "Firepower Management Center" and version "2.9.14.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 2.9.15 Search vendor "Cisco" for product "Firepower Management Center" and version "2.9.15" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 2.9.16 Search vendor "Cisco" for product "Firepower Management Center" and version "2.9.16" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 2.9.17 Search vendor "Cisco" for product "Firepower Management Center" and version "2.9.17" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 2.9.18 Search vendor "Cisco" for product "Firepower Management Center" and version "2.9.18" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Management Center Search vendor "Cisco" for product "Firepower Management Center" | 3.0.1 Search vendor "Cisco" for product "Firepower Management Center" and version "3.0.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Firepower Threat Defense Search vendor "Cisco" for product "Firepower Threat Defense" | < 6.7.0 Search vendor "Cisco" for product "Firepower Threat Defense" and version " < 6.7.0" | - |
Affected
| ||||||
| Snort Search vendor "Snort" | Snort Search vendor "Snort" for product "Snort" | < 2.9.17 Search vendor "Snort" for product "Snort" and version " < 2.9.17" | - |
Affected
| ||||||