VDB
CVE-2021-34753
CVE-2021-34753
PUBLISHED
CVSS 5.800000190734863 MEDIUM
A vulnerability in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured rules for ENIP traffic. This vulnerability is due to incomplete processing during deep packet inspection for ENIP packets. An attacker could exploit this vulnerability by sending a crafted ENIP packet to the targeted interface. A successful exploit could allow the attacker to bypass configured access control and intrusion policies that should trigger and drop for the ENIP packet.
EPSS 0.08% · 23.9th percentile
Risk Scores
CVSS 3.1
5.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
EPSS Score
0.08%
23.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | firepower_threat_defense_software | 0, 7.0.0, 6.5.0 |
| Cisco | Cisco Firepower Threat Defense Software | N/A |
| cisco | firepower_threat_defense_software | 6.5.0, 7.0.0, 6.7.0 |
Exploit Intelligence
Timeline
- Nov 15, 2024 CVE Published
- Nov 15, 2024 CVE Updated
- Nov 16, 2024 EPSS Score
- Dec 5, 2024 EPSS Score
- Dec 22, 2024 EPSS Score
- Jan 9, 2025 EPSS Score
- Jan 26, 2025 EPSS Score
- Feb 13, 2025 EPSS Score
- Mar 3, 2025 EPSS Score
- Mar 20, 2025 EPSS Score
- Apr 7, 2025 EPSS Score
- Apr 24, 2025 EPSS Score