CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-34754

Multiple vulnerabilities in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured rules for ENIP traffic. These vulnerabilities are due to incomplete processing during deep packet inspection for ENIP packets. An attacker could exploit these vulnerabilities by sending a crafted ENIP packet to the targeted interface. A successful exploit could allow the attacker to bypass configured access control and intrusion policies that should be activated for the ENIP packet.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 40.8%

CVSS Severity

CVSS v3 Score 5.8

CVSS v2 Score 5.0

References

Products affected by CVE-2021-34754

Cisco » Firepower Threat Defense » Version: 6.4.0

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0
Cisco » Firepower Threat Defense » Version: 6.4.0.1

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.1
Cisco » Firepower Threat Defense » Version: 6.4.0.10

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.10
Cisco » Firepower Threat Defense » Version: 6.4.0.11

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.11
Cisco » Firepower Threat Defense » Version: 6.4.0.12

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.12
Cisco » Firepower Threat Defense » Version: 6.4.0.2

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.2
Cisco » Firepower Threat Defense » Version: 6.4.0.3

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.3
Cisco » Firepower Threat Defense » Version: 6.4.0.4

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.4
Cisco » Firepower Threat Defense » Version: 6.4.0.5

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.5
Cisco » Firepower Threat Defense » Version: 6.4.0.6

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.6
Cisco » Firepower Threat Defense » Version: 6.4.0.7

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.7
Cisco » Firepower Threat Defense » Version: 6.4.0.8

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.8
Cisco » Firepower Threat Defense » Version: 6.4.0.9

cpe:2.3:a:cisco:firepower_threat_defense:6.4.0.9
Cisco » Firepower Threat Defense » Version: 6.6.0

cpe:2.3:a:cisco:firepower_threat_defense:6.6.0
Cisco » Firepower Threat Defense » Version: 6.6.0.1

cpe:2.3:a:cisco:firepower_threat_defense:6.6.0.1
Cisco » Firepower Threat Defense » Version: 6.6.1

cpe:2.3:a:cisco:firepower_threat_defense:6.6.1
Cisco » Firepower Threat Defense » Version: 6.6.3

cpe:2.3:a:cisco:firepower_threat_defense:6.6.3
Cisco » Firepower Threat Defense » Version: 6.6.4

cpe:2.3:a:cisco:firepower_threat_defense:6.6.4
Cisco » Firepower Threat Defense » Version: 6.6.5

cpe:2.3:a:cisco:firepower_threat_defense:6.6.5
Cisco » Firepower Threat Defense » Version: 6.7.0

cpe:2.3:a:cisco:firepower_threat_defense:6.7.0
Cisco » Firepower Threat Defense » Version: 6.7.0.1

cpe:2.3:a:cisco:firepower_threat_defense:6.7.0.1
Cisco » Firepower Threat Defense » Version: 6.7.0.2

cpe:2.3:a:cisco:firepower_threat_defense:6.7.0.2
Cisco » Firepower Threat Defense » Version: 7.0.0

cpe:2.3:a:cisco:firepower_threat_defense:7.0.0
Cisco » Firepower Threat Defense » Version: 7.0.0.1

cpe:2.3:a:cisco:firepower_threat_defense:7.0.0.1
Cisco » Secure Firewall Management Center » Version: 2.9.12

cpe:2.3:a:cisco:secure_firewall_management_center:2.9.12
Cisco » Secure Firewall Management Center » Version: 2.9.14.0

cpe:2.3:a:cisco:secure_firewall_management_center:2.9.14.0
Cisco » Secure Firewall Management Center » Version: 2.9.16

cpe:2.3:a:cisco:secure_firewall_management_center:2.9.16
Cisco » Secure Firewall Management Center » Version: 2.9.17

cpe:2.3:a:cisco:secure_firewall_management_center:2.9.17
Cisco » Secure Firewall Management Center » Version: 2.9.18

cpe:2.3:a:cisco:secure_firewall_management_center:2.9.18

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-34754

Products

Pricing

Contact Us