ZeroHour

CVE-2021-34791

CVSS 3.1
5.3 medium
EPSS
1%p65
Published
()
Modified
Description

Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized connections with a host located behind the ALG. For more information about these vulnerabilities, see the Details section of this advisory. Note: These vulnerabilities have been publicly discussed as NAT Slipstreaming.

Vendors
cisco
Products
adaptive security appliance, secure firewall threat defense, adaptive security appliance software, asa 5512-x firmware, asa 5505 firmware, asa 5515-x firmware, asa 5525-x firmware, asa 5545-x firmware, asa 5555-x firmware, asa 5580 firmware, asa 5585-x firmware
Weakness
CWE-358, CWE-20
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

In the news

No ingested article mentions this CVE yet.