Vulnerabilities > CVE-2021-1495 - Improper Handling of Exceptional Conditions vulnerability in multiple products

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

LOW

Availability impact

NONE

network

low complexity

cisco

snort

CWE-755

NVD

Published: 2021-04-29

Updated: 2024-11-21

Summary

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of specific HTTP header parameters. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass a configured file policy for HTTP packets and deliver a malicious payload.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Firepower Threat Defense 6.5.0 Cisco Firepower Threat Defense 6.5.0.1 Cisco Firepower Threat Defense 6.5.0.2 Cisco Firepower Threat Defense 6.5.0.3 Cisco Firepower Threat Defense 6.5.0.4 Cisco Firepower Threat Defense 6.5.0.5 Cisco Firepower Threat Defense 6.6.0 Cisco Firepower Threat Defense 6.6.0.1 Cisco Firepower Threat Defense 6.6.1 Cisco Firepower Threat Defense 6.6.3 Cisco Firepower Threat Defense 6.7.0 Cisco Firepower Threat Defense 6.7.0.1 Cisco Firepower Threat Defense - Cisco Firepower Threat Defense 5.3.0 Cisco Firepower Threat Defense 5.4.0 Cisco Firepower Threat Defense 6.0 Cisco Firepower Threat Defense 6.0.0 Cisco Firepower Threat Defense 6.0.0.1 Cisco Firepower Threat Defense 6.0.1 Cisco Firepower Threat Defense 6.0.1.1 Cisco Firepower Threat Defense 6.0.1.2 Cisco Firepower Threat Defense 6.0.1.3 Cisco Firepower Threat Defense 6.0.1.4 Cisco Firepower Threat Defense 6.1.0 Cisco Firepower Threat Defense 6.1.0.1 Cisco Firepower Threat Defense 6.1.0.2 Cisco Firepower Threat Defense 6.1.0.3 Cisco Firepower Threat Defense 6.1.0.4 Cisco Firepower Threat Defense 6.1.0.5 Cisco Firepower Threat Defense 6.1.0.6 Cisco Firepower Threat Defense 6.1.0.7 Cisco Firepower Threat Defense 6.2.0 Cisco Firepower Threat Defense 6.2.0.1 Cisco Firepower Threat Defense 6.2.0.2 Cisco Firepower Threat Defense 6.2.0.3 Cisco Firepower Threat Defense 6.2.0.4 Cisco Firepower Threat Defense 6.2.0.5 Cisco Firepower Threat Defense 6.2.0.6 Cisco Firepower Threat Defense 6.2.1 Cisco Firepower Threat Defense 6.2.2 Cisco Firepower Threat Defense 6.2.2.1 Cisco Firepower Threat Defense 6.2.2.2 Cisco Firepower Threat Defense 6.2.2.3 Cisco Firepower Threat Defense 6.2.2.4 Cisco Firepower Threat Defense 6.2.2.5 Cisco Firepower Threat Defense 6.2.3 Cisco Firepower Threat Defense 6.2.3.0 Cisco Firepower Threat Defense 6.2.3.1 Cisco Firepower Threat Defense 6.2.3.2 Cisco Firepower Threat Defense 6.2.3.3 Cisco Firepower Threat Defense 6.2.3.4 Cisco Firepower Threat Defense 6.2.3.5 Cisco Firepower Threat Defense 6.2.3.6 Cisco Firepower Threat Defense 6.2.3.7 Cisco Firepower Threat Defense 6.2.3.8 Cisco Firepower Threat Defense 6.2.3.9 Cisco Firepower Threat Defense 6.2.3.10 Cisco Firepower Threat Defense 6.2.3.11 Cisco Firepower Threat Defense 6.2.3.12 Cisco Firepower Threat Defense 6.2.3.13 Cisco Firepower Threat Defense 6.2.3.14 Cisco Firepower Threat Defense 6.2.3.15 Cisco Firepower Threat Defense 6.2.3.16 Cisco Firepower Threat Defense 6.2.3.17 Cisco Firepower Threat Defense 6.2.3.18 Cisco Firepower Threat Defense 6.3.0 Cisco Firepower Threat Defense 6.3.0.1 Cisco Firepower Threat Defense 6.3.0.2 Cisco Firepower Threat Defense 6.3.0.3 Cisco Firepower Threat Defense 6.3.0.4 Cisco Firepower Threat Defense 6.3.0.5 Cisco Firepower Threat Defense 6.3.0.6 Cisco Firepower Threat Defense 6.4.0 Cisco Firepower Threat Defense 6.4.0.1 Cisco Firepower Threat Defense 6.4.0.2 Cisco Firepower Threat Defense 6.4.0.3 Cisco Firepower Threat Defense 6.4.0.4 Cisco Firepower Threat Defense 6.4.0.5 Cisco Firepower Threat Defense 6.4.0.6 Cisco Firepower Threat Defense 6.4.0.7 Cisco Firepower Threat Defense 6.4.0.8 Cisco Firepower Threat Defense 6.4.0.9 Cisco Firepower Threat Defense 6.4.0.10 Cisco Firepower Threat Defense 6.4.0.11 Cisco IOS XE 16.12.1 Cisco IOS XE 16.12.2R	86
Application	Snort Snort Snort - Snort Snort 1.6 Snort Snort 1.8.0 Snort Snort 1.8.1 Snort Snort 1.8.2 Snort Snort 1.8.3 Snort Snort 1.8.4 Snort Snort 1.8.5 Snort Snort 1.8.6 Snort Snort 1.8.7 Snort Snort 1.9.0 Snort Snort 1.9.1 Snort Snort 2.0 Snort Snort 2.6.1 Snort Snort 2.6.1.1 Snort Snort 2.6.1.2 Snort Snort 2.6.2 Snort Snort 2.7_Beta1 Snort Snort 2.9.11.1 Snort Snort 2.9.12.0 Snort Snort 2.9.13.0 Snort Snort 2.9.13.1 Snort Snort 2.9.14 Snort Snort 2.9.14.0 Snort Snort 2.9.14.1 Snort Snort 2.9.15 Snort Snort 2.9.15.1 Snort Snort 2.9.16 Snort Snort 2.9.16.1 Snort Snort 2.9.17	32
OS	Cisco Cisco IOS XE 17.1 Cisco IOS XE 17.1.0 Cisco IOS XE 17.1.1 Cisco IOS XE 17.1.1A Cisco IOS XE 17.1.1S Cisco IOS XE 17.1.1T Cisco IOS XE 17.1.2 Cisco IOS XE 17.1.3 Cisco IOS XE 17.2 Cisco IOS XE 17.2.0 Cisco IOS XE 17.2.1 Cisco IOS XE 17.2.1A Cisco IOS XE 17.2.1R Cisco IOS XE 17.2.1T Cisco IOS XE 17.2.1V Cisco IOS XE 17.2.2 Cisco IOS XE 17.2.3 Cisco IOS XE 17.3 Cisco IOS XE 17.3.1 Cisco IOS XE 17.3.1A Cisco IOS XE 17.3.1W Cisco IOS XE 17.3.1X Cisco IOS XE 17.3.1Z Cisco IOS XE 17.3.2 Cisco IOS XE 17.3.2A Cisco IOS XE 17.4	26
Hardware	Cisco Cisco 1100 4G/6G Integrated Services Router - Cisco 1101 Integrated Services Router - Cisco 1109 Integrated Services Router - Cisco 1111X Integrated Services Router - Cisco 111X Integrated Services Router - Cisco 1120 Integrated Services Router - Cisco 1160 Integrated Services Router - Cisco 3000 Integrated Services Router - Cisco 4221 Integrated Services Router - Cisco 4331 Integrated Services Router - Cisco 4431 Integrated Services Router - Cisco 4461 Integrated Services Router - Cisco C8200 1N 4T - Cisco C8200L 1N 4T - Cisco Catalyst 8300 1N1S 4T2X - Cisco Catalyst 8300 1N1S 6T - Cisco Catalyst 8300 2N2S 4T2X - Cisco Catalyst 8300 2N2S 6T - Cisco Catalyst 8500L -	19

Common Weakness Enumeration (CWE)

CWE-755 - Improper Handling of Exceptional Conditions

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References