CVE-2021-40118: Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerabilities
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper input validation when parsing HTTPS requests. An attacker could exploit this vulnerability by sending a malicious HTTPS request to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-40118?
CVE-2021-40118 has been assigned a CVSS score indicating a high severity risk due to the potential for denial of service.
Who is affected by CVE-2021-40118?
CVE-2021-40118 affects users running vulnerable versions of Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software.
How do I fix CVE-2021-40118?
To fix CVE-2021-40118, users should update to the latest patched versions of the affected Cisco software.
What type of vulnerability is CVE-2021-40118?
CVE-2021-40118 is classified as a denial of service (DoS) vulnerability that can be exploited by unauthenticated remote attackers.
Can CVE-2021-40118 be exploited remotely?
Yes, CVE-2021-40118 can be exploited remotely by unauthenticated attackers to cause a denial of service condition.