CVE-2021-1494
Debian Security Advisory 5354-1
Severity Score
5.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of specific HTTP header parameters. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass a configured file policy for HTTP packets and deliver a malicious payload.
Multiple security vulnerabilities were discovered in snort, a flexible Network Intrusion Detection System, which could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or bypass filtering technology on an affected device and ex-filtrate data from a compromised host.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-11-13 CVE Reserved
- 2023-02-20 CVE Published
- 2024-11-15 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-693: Protection Mechanism Failure
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http-fp-bp-KfDdcQhc |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Cisco UTD SNORT IPS Engine Software Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" | 16.12.1 Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" and version "16.12.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco UTD SNORT IPS Engine Software Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" | 16.12.2 Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" and version "16.12.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco UTD SNORT IPS Engine Software Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" | 16.12.3 Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" and version "16.12.3" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco UTD SNORT IPS Engine Software Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" | 16.12.4 Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" and version "16.12.4" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco UTD SNORT IPS Engine Software Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" | 16.6.1 Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" and version "16.6.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco UTD SNORT IPS Engine Software Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" | 16.6.5 Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" and version "16.6.5" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco UTD SNORT IPS Engine Software Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" | 16.6.6 Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" and version "16.6.6" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco UTD SNORT IPS Engine Software Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" | 16.6.7 Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" and version "16.6.7" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco UTD SNORT IPS Engine Software Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" | 16.6.9 Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" and version "16.6.9" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco UTD SNORT IPS Engine Software Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" | 17.1.1 Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" and version "17.1.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco UTD SNORT IPS Engine Software Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" | 17.2.1 Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" and version "17.2.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco UTD SNORT IPS Engine Software Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" | 17.3.1 Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" and version "17.3.1" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco UTD SNORT IPS Engine Software Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" | 17.3.2 Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" and version "17.3.2" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco UTD SNORT IPS Engine Software Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" | 3.17.0 Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" and version "3.17.0" | en |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Cisco UTD SNORT IPS Engine Software Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" | 3.17.1 Search vendor "Cisco" for product "Cisco UTD SNORT IPS Engine Software" and version "3.17.1" | en |
Affected
| ||||||