CVE-2021-34792: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Resource Exhaustion Denial of Service Vulnerability

Q: What is the severity of CVE-2021-34792?

The severity of CVE-2021-34792 is classified as high due to its potential to cause a denial of service (DoS) condition.

Q: How do I fix CVE-2021-34792?

To fix CVE-2021-34792, you should upgrade to the patched versions of Cisco ASA or Firepower Threat Defense Software as specified in the advisory.

Q: What are the impacted versions for CVE-2021-34792?

CVE-2021-34792 affects several versions of Cisco Adaptive Security Appliance and Firepower Threat Defense Software, specifically those below specified patch versions.

Q: Is my Cisco device vulnerable to CVE-2021-34792?

To determine if your Cisco device is vulnerable to CVE-2021-34792, check the specific software version against the list of affected versions.

Q: Can CVE-2021-34792 be exploited remotely?

Yes, CVE-2021-34792 can be exploited by an unauthenticated, remote attacker, leading to a DoS condition.

Published Oct 27, 2021

Updated

A vulnerability in the memory management of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper resource management when connection rates are high. An attacker could exploit this vulnerability by opening a significant number of connections on an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

Affected Software

93 affected components

Cisco Firepower Threat Defense>=6.4.0<6.4.0.13

Cisco Firepower Threat Defense>=6.6.0<6.6.5

Cisco Firepower Threat Defense>=6.7.0<6.7.0.3

Cisco Firepower Threat Defense>=7.0.0<7.0.1

Cisco Adaptive Security Appliance Software>=9.8.0<9.8.4.40

Cisco Adaptive Security Appliance Software>=9.12.0<9.12.4.29

Cisco Adaptive Security Appliance Software>=9.14.0<9.14.3.9

Cisco Adaptive Security Appliance Software>=9.15.0<9.15.1.17

Cisco Adaptive Security Appliance Software>=9.16.0<9.16.2.3

Cisco Asa 5512-x Firmware=009.014\(001.150\)

Cisco Asa 5512-x Firmware=099.017\(001.211\)

Cisco Asa 5512-x Firmware=099.017\(001.220\)

Cisco Asa 5512-x Firmware=099.017\(015.050\)

Cisco Asa 5512-x

Cisco Asa 5505 Firmware=009.014\(001.150\)

Cisco Asa 5505 Firmware=099.017\(001.211\)

Cisco Asa 5505 Firmware=099.017\(001.220\)

Cisco Asa 5505 Firmware=099.017\(015.050\)

Cisco Asa 5505

Cisco Asa 5515-x Firmware=009.014\(001.150\)

Cisco Asa 5515-x Firmware=099.017\(001.211\)

Cisco Asa 5515-x Firmware=099.017\(001.220\)

Cisco Asa 5515-x Firmware=099.017\(015.050\)

Cisco Asa 5515-x

Cisco Asa 5525-x Firmware=009.014\(001.150\)

Cisco Asa 5525-x Firmware=099.017\(001.211\)

Cisco Asa 5525-x Firmware=099.017\(001.220\)

Cisco Asa 5525-x Firmware=099.017\(015.050\)

Cisco Asa 5525-x

Cisco Asa 5545-x Firmware=009.014\(001.150\)

Cisco Asa 5545-x Firmware=099.017\(001.211\)

Cisco Asa 5545-x Firmware=099.017\(001.220\)

Cisco Asa 5545-x Firmware=099.017\(015.050\)

Cisco Asa 5545-x

Cisco Asa 5555-x Firmware=009.014\(001.150\)

Cisco Asa 5555-x Firmware=099.017\(001.211\)

Cisco Asa 5555-x Firmware=099.017\(001.220\)

Cisco Asa 5555-x Firmware=099.017\(015.050\)

Cisco Asa 5555-x

Cisco Asa 5580 Firmware=009.014\(001.150\)

Cisco Asa 5580 Firmware=099.017\(001.211\)

Cisco Asa 5580 Firmware=099.017\(001.220\)

Cisco Asa 5580 Firmware=099.017\(015.050\)

Cisco Asa 5580

Cisco Asa 5585-x Firmware=009.014\(001.150\)

Cisco Asa 5585-x Firmware=099.017\(001.211\)

Cisco Asa 5585-x Firmware=099.017\(001.220\)

Cisco Asa 5585-x Firmware=099.017\(015.050\)

Cisco Asa 5585-x

Cisco Secure Firewall Threat Defense>=6.4.0<6.4.0.13

Cisco Secure Firewall Threat Defense>=6.6.0<6.6.5

Cisco Secure Firewall Threat Defense>=6.7.0<6.7.0.3

Cisco Secure Firewall Threat Defense>=7.0.0<7.0.1

All of the following

Any of the following

Cisco Asa 5512-x Firmware=009.014\(001.150\)

Cisco Asa 5512-x Firmware=099.017\(001.211\)

Cisco Asa 5512-x Firmware=099.017\(001.220\)

Cisco Asa 5512-x Firmware=099.017\(015.050\)

Cisco Asa 5512-x

All of the following

Any of the following

Cisco Asa 5505 Firmware=009.014\(001.150\)

Cisco Asa 5505 Firmware=099.017\(001.211\)

Cisco Asa 5505 Firmware=099.017\(001.220\)

Cisco Asa 5505 Firmware=099.017\(015.050\)

Cisco Asa 5505

All of the following

Any of the following

Cisco Asa 5515-x Firmware=009.014\(001.150\)

Cisco Asa 5515-x Firmware=099.017\(001.211\)

Cisco Asa 5515-x Firmware=099.017\(001.220\)

Cisco Asa 5515-x Firmware=099.017\(015.050\)

Cisco Asa 5515-x

All of the following

Any of the following

Cisco Asa 5525-x Firmware=009.014\(001.150\)

Cisco Asa 5525-x Firmware=099.017\(001.211\)

Cisco Asa 5525-x Firmware=099.017\(001.220\)

Cisco Asa 5525-x Firmware=099.017\(015.050\)

Cisco Asa 5525-x

All of the following

Any of the following

Cisco Asa 5545-x Firmware=009.014\(001.150\)

Cisco Asa 5545-x Firmware=099.017\(001.211\)

Cisco Asa 5545-x Firmware=099.017\(001.220\)

Cisco Asa 5545-x Firmware=099.017\(015.050\)

Cisco Asa 5545-x

All of the following

Any of the following

Cisco Asa 5555-x Firmware=009.014\(001.150\)

Cisco Asa 5555-x Firmware=099.017\(001.211\)

Cisco Asa 5555-x Firmware=099.017\(001.220\)

Cisco Asa 5555-x Firmware=099.017\(015.050\)

Cisco Asa 5555-x

All of the following

Any of the following

Cisco Asa 5580 Firmware=009.014\(001.150\)

Cisco Asa 5580 Firmware=099.017\(001.211\)

Cisco Asa 5580 Firmware=099.017\(001.220\)

Cisco Asa 5580 Firmware=099.017\(015.050\)

Cisco Asa 5580

All of the following

Any of the following

Cisco Asa 5585-x Firmware=009.014\(001.150\)

Cisco Asa 5585-x Firmware=099.017\(001.211\)

Cisco Asa 5585-x Firmware=099.017\(001.220\)

Cisco Asa 5585-x Firmware=099.017\(015.050\)

Cisco Asa 5585-x

Event History

Oct 27, 2021

CVE Published

via MITRE·06:56 PM

Data Sourced

via MITRE·06:56 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2021-34792?

The severity of CVE-2021-34792 is classified as high due to its potential to cause a denial of service (DoS) condition.

How do I fix CVE-2021-34792?

To fix CVE-2021-34792, you should upgrade to the patched versions of Cisco ASA or Firepower Threat Defense Software as specified in the advisory.

What are the impacted versions for CVE-2021-34792?

CVE-2021-34792 affects several versions of Cisco Adaptive Security Appliance and Firepower Threat Defense Software, specifically those below specified patch versions.

Is my Cisco device vulnerable to CVE-2021-34792?

To determine if your Cisco device is vulnerable to CVE-2021-34792, check the specific software version against the list of affected versions.

Can CVE-2021-34792 be exploited remotely?

Yes, CVE-2021-34792 can be exploited by an unauthenticated, remote attacker, leading to a DoS condition.

CVE-2021-34792: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Resource Exhaustion Denial of Service Vulnerability

Affected Software

Event History

Frequently Asked Questions

What is the severity of CVE-2021-34792?

How do I fix CVE-2021-34792?

What are the impacted versions for CVE-2021-34792?

Is my Cisco device vulnerable to CVE-2021-34792?

Can CVE-2021-34792 be exploited remotely?

Company

Resources

Contact