Tracker / CVE-2021-1236
CVE-2021-1236
Medium 5.3
Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit this vulnerability by sending crafted packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network.
Affected products and versions
| cisco | ios_xe · … → 17.4.1 |
|---|---|
| cisco | secure_firewall_management_center |
| cisco | secure_firewall_threat_defense · … → 6.5.0.5 |
| snort | snort · … → 2.9.14 |
Analysis
This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.