A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service (DoS) vulnerability. This vulnerability is due to incorrect handling of certain TCP segments when the affected device is operating in transparent mode. An attacker could exploit this vulnerability by sending a crafted TCP segment through an affected device. A successful exploit could allow the attacker to poison the MAC address tables in adjacent devices, resulting in network disruption.
Project Subscriptions
| Vendors | Products |
|---|---|
|
Cisco
Subscribe
|
Adaptive Security Appliance
Subscribe
Adaptive Security Appliance Software
Subscribe
Asa 5505
Subscribe
Asa 5505 Firmware
Subscribe
Asa 5512-x
Subscribe
Asa 5512-x Firmware
Subscribe
Asa 5515-x
Subscribe
Asa 5515-x Firmware
Subscribe
Asa 5525-x
Subscribe
Asa 5525-x Firmware
Subscribe
Asa 5545-x
Subscribe
Asa 5545-x Firmware
Subscribe
Asa 5555-x
Subscribe
Asa 5555-x Firmware
Subscribe
Asa 5580
Subscribe
Asa 5580 Firmware
Subscribe
Asa 5585-x
Subscribe
Asa 5585-x Firmware
Subscribe
Firepower Threat Defense
Subscribe
|
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2021-21443 | A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an unauthenticated, remote attacker to poison MAC address tables, resulting in a denial of service (DoS) vulnerability. This vulnerability is due to incorrect handling of certain TCP segments when the affected device is operating in transparent mode. An attacker could exploit this vulnerability by sending a crafted TCP segment through an affected device. A successful exploit could allow the attacker to poison the MAC address tables in adjacent devices, resulting in network disruption. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 07 Nov 2024 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: cisco
Published:
Updated: 2024-11-07T21:45:43.962Z
Reserved: 2021-06-15T00:00:00
Link: CVE-2021-34793
Updated: 2024-08-04T00:19:48.210Z
Status : Modified
Published: 2021-10-27T19:15:08.563
Modified: 2024-11-21T06:11:13.063
Link: CVE-2021-34793
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD