CVE-2021-1573: Input Validation
First published: Tue Jan 11 2022(Updated: )
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper input validation when parsing HTTPS requests. An attacker could exploit this vulnerability by sending a malicious HTTPS request to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Adaptive Security Appliance | <=9.7 | |
| Cisco Firepower Threat Defense | <=6.2.2 | |
| Cisco Firepower Threat Defense | >=6.2.3<6.4.0.13 | |
| Cisco Firepower Threat Defense | >=6.5.0<6.6.5 | |
| Cisco Firepower Threat Defense | >=6.7.0<6.7.0.3 | |
| Cisco Firepower Threat Defense | =7.0.0 | |
| Cisco Adaptive Security Appliance Software | >=9.8<9.8.4.40 | |
| Cisco Adaptive Security Appliance Software | >=9.9<9.12.4.26 | |
| Cisco Adaptive Security Appliance Software | >=9.13<9.14.3 | |
| Cisco Adaptive Security Appliance Software | >=9.15<9.15.1.17 | |
| Cisco Adaptive Security Appliance Software | >=9.16<9.16.1.28 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-1573?
CVE-2021-1573 is a vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software.
What is the severity of CVE-2021-1573?
The severity of CVE-2021-1573 is high with a severity value of 7.5.
How does CVE-2021-1573 affect Cisco Adaptive Security Appliance (ASA) Software?
CVE-2021-1573 affects Cisco Adaptive Security Appliance (ASA) Software versions up to 9.7.
How does CVE-2021-1573 affect Cisco Firepower Threat Defense (FTD) Software?
CVE-2021-1573 affects Cisco Firepower Threat Defense (FTD) Software versions up to 6.2.2, 6.2.3 to 6.4.0.13, 6.5.0 to 6.6.5, 6.7.0 to 6.7.0.3, and 7.0.0.
How can I fix CVE-2021-1573?
To fix CVE-2021-1573, it is recommended to upgrade Cisco ASA Software to version 9.7 or higher and Cisco FTD Software to version 6.2.3.14, 6.4.0.14, 6.6.6, 6.7.0.4, or 7.0.1.
- collector/nvd-api
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/tags
- agent/event
- agent/weakness
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- vendor/cisco
- canonical/cisco adaptive security appliance
- version/cisco adaptive security appliance/9.7
- canonical/cisco firepower threat defense
- version/cisco firepower threat defense/6.2.2
- version/cisco firepower threat defense/6.2.3
- version/cisco firepower threat defense/6.5.0
- version/cisco firepower threat defense/6.7.0
- version/cisco firepower threat defense/7.0.0
- canonical/cisco adaptive security appliance software
- version/cisco adaptive security appliance software/9.8
- version/cisco adaptive security appliance software/9.9
- version/cisco adaptive security appliance software/9.13
- version/cisco adaptive security appliance software/9.15
- version/cisco adaptive security appliance software/9.16