CVE-2021-34781CWE-119CWE-755

CVE-2021-34781

High · published October 27, 2021

CVSS v3.1
8.6
EPSS
1%
Percentile
72.3
In the wild
Unconfirmed
What it is

A vulnerability in the processing of SSH connections for multi-instance deployments of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability is due to a lack of proper error handling when an SSH session fails to be established. An attacker could exploit this vulnerability by sending a high rate of crafted SSH connections to the instance. A successful exploit could allow the attacker to cause resource exhaustion, which causes a DoS condition on the affected device. The device must be manually reloaded to recover.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01402 · 72.3th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-755 · Improper Handling of Exceptional Conditions
Published
2021-10-27T23:15Z
Affected products (20)
ProductVersionsFixed in
cisco/firepower_management_center_virtual_applianceall versions—
cisco/firepower_management_center_virtual_applianceall versions—
cisco/firepower_management_center_virtual_applianceall versions—
cisco/firepower_management_center_virtual_applianceall versions—
cisco/firepower_management_center_virtual_applianceall versions—
cisco/firepower_management_center_virtual_applianceall versions—
cisco/firepower_management_center_virtual_applianceall versions—
cisco/firepower_management_center_virtual_applianceall versions—
cisco/secure_firewall_threat_defense≥ 6.3.0, < 6.4.0.136.4.0.13
cisco/secure_firewall_threat_defense≥ 6.5.0, < 6.6.56.6.5
cisco/secure_firewall_threat_defense≥ 6.7.0, < 6.7.0.36.7.0.3
cisco/secure_firewall_threat_defense≥ 7.0.0, < 7.0.17.0.1
cisco/sourcefire_defense_centerall versions—
cisco/sourcefire_defense_centerall versions—
cisco/sourcefire_defense_centerall versions—
cisco/sourcefire_defense_centerall versions—
cisco/sourcefire_defense_centerall versions—
cisco/sourcefire_defense_centerall versions—
cisco/sourcefire_defense_centerall versions—
cisco/sourcefire_defense_centerall versions—
References (2)
EPSS history
Timeline
  • 27 OCT 18:55Z
    Cisco Firepower Threat Defense Software SSH Connections Denial of Service Vulnerability
    cvelistv5