VDB

CVE-2021-1501

CVE-2021-1501 PUBLISHED CVSS 8.600000381469727 HIGH

A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service (DoS) condition.The vulnerability is due to a crash that occurs during a hash lookup for a SIP pinhole connection. An attacker could exploit this vulnerability by sending crafted SIP traffic through an affected device. A successful exploit could allow the attacker to cause a crash and reload of the affected device.

EPSS 0.77% · 73.9th percentile

Risk Scores

CVSS 3.1
8.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
EPSS Score
0.77%
73.9th percentile

Affected Products

VendorProductVersions
CiscoCisco Adaptive Security Appliance (ASA) Softwaren/a
ciscofirepower_threat_defense6.2.2, 6.7.0, 6.5.0
ciscoadaptive_security_appliance_software9.15, 9.8, 9.10

Exploit Intelligence

Timeline

  • Apr 29, 2021 CVE Published
  • Apr 30, 2021 EPSS Score
  • Jul 3, 2021 EPSS Score
  • Sep 3, 2021 EPSS Score
  • Nov 5, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Mar 9, 2022 EPSS Score
  • Apr 1, 2022 EPSS Score
  • May 10, 2022 EPSS Score
  • Jul 11, 2022 EPSS Score
  • Sep 12, 2022 EPSS Score
  • Nov 14, 2022 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›