CVE-2021-40117: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability
A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because incoming SSL/TLS packets are not properly processed. An attacker could exploit this vulnerability by sending a crafted SSL/TLS packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-40117.
What is the severity of CVE-2021-40117?
The severity of CVE-2021-40117 is high with a CVSS score of 7.5.
Which software is affected by CVE-2021-40117?
Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software are affected by CVE-2021-40117.
What is the impact of CVE-2021-40117?
CVE-2021-40117 could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
Where can I find more information about CVE-2021-40117?
You can find more information about CVE-2021-40117 in the Cisco Security Advisory: [link](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-dos-4ygzLKU9).