Security Advisory

CVE-2021-40117

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-10-27 18:56:48
Last updated 2024-11-07 21:45:24
Assigner cisco
State PUBLISHED

Description

A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because incoming SSL/TLS packets are not properly processed. An attacker could exploit this vulnerability by sending a crafted SSL/TLS packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.