VDB
CVE-2021-1236
CVE-2021-1236
PUBLISHED
CVSS 4 MEDIUM
Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit this vulnerability by sending crafted packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network.
EPSS 2.15% · 80.5th percentile
Risk Scores
CVSS 3.0
4
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
EPSS Score
2.15%
80.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:20.04:LTS | snort | 0, 2.9.7.0-5build1 |
| Ubuntu:18.04:LTS | snort | 2.9.7.0-5, 2.9.7.0-5build1, 0 |
| Ubuntu:14.04:LTS | snort | 2.9.2.2-3, 2.9.5.3-3, 2.9.6.0-0ubuntu1 |
| Ubuntu:16.04:LTS | snort | 0, 2.9.7.0-5 |
Timeline
- Jan 13, 2021 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Dec 28, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Nov 7, 2022 EPSS Score
References
- https://ubuntu.com/security/CVE-2021-1236 third-party-advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-app-bypass-cSBYCATq third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2021-1236 third-party-advisory