VDB
CVE-2021-34753
CVE-2021-34753
PUBLISHED
CVSS 5.800000190734863 MEDIUM
A vulnerability in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured rules for ENIP traffic. This vulnerability is due to incomplete processing during deep packet inspection for ENIP packets. An attacker could exploit this vulnerability by sending a crafted ENIP packet to the targeted interface. A successful exploit could allow the attacker to bypass configured access control and intrusion policies that should trigger and drop for the ENIP packet.
EPSS 0.66% · 50.1th percentile
Risk Scores
CVSS 3.1
5.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N
EPSS Score
0.66%
50.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | firepower_threat_defense_software | 0, 7.0.0, 6.5.0 |
| Cisco | Cisco Firepower Threat Defense Software | N/A |
| cisco | firepower_threat_defense_software | 6.5.0, 7.0.0, 6.7.0 |
Timeline
- Nov 15, 2024 CVE Published
- Nov 15, 2024 CVE Updated
- Nov 16, 2024 EPSS Score
- Dec 5, 2024 EPSS Score
- Dec 24, 2024 EPSS Score
- Jan 11, 2025 EPSS Score
- Jan 29, 2025 EPSS Score
- Feb 16, 2025 EPSS Score
- Mar 7, 2025 EPSS Score
- Mar 25, 2025 EPSS Score
- Apr 12, 2025 EPSS Score
- Apr 30, 2025 EPSS Score