CVE-2021-1236
Last modified
CVE-2021-1236 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. EPSS estimates a 2.15% chance of exploitation in the next 30 days.
Description
Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit this vulnerability by sending crafted packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios Xe | < 17.4.1 |
| Cisco | Secure Firewall Management Center | 2.9.14.0 |
| Cisco | Secure Firewall Management Center | 2.9.14.14 |
| Cisco | Secure Firewall Management Center | 2.9.15 |
| Cisco | Secure Firewall Management Center | 2.9.16 |
| Cisco | Secure Firewall Management Center | 2.9.17 |
| Cisco | Secure Firewall Threat Defense | < 6.5.0.5 |
| Snort | Snort | < 2.9.14 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-1236?
How severe is CVE-2021-1236?
How do I fix CVE-2021-1236?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-1230A vulnerability with the Border Gateway Protocol (BGP) for C…7.5
- CVE-2021-1231A vulnerability in the Link Layer Discovery Protocol (LLDP) …4.7
- CVE-2021-1232A vulnerability in the web-based management interface of Cis…6.5
- CVE-2021-1233A vulnerability in the CLI of Cisco SD-WAN Software could al…4.4
- CVE-2021-1234A vulnerability in the cluster management interface of Cisco…5.3
- CVE-2021-1235A vulnerability in the CLI of Cisco SD-WAN vManage Software …5.5
- CVE-2021-1237A vulnerability in the Network Access Manager and Web Securi…7.8
- CVE-2021-1238Multiple vulnerabilities in the web-based management interfa…4.8
- CVE-2021-1239Multiple vulnerabilities in the web-based management interfa…4.8
- CVE-2021-1240A vulnerability in the loading process of specific DLLs in C…7.3
- CVE-2021-1241Multiple vulnerabilities in Cisco SD-WAN products could allo…7.5
- CVE-2021-1242A vulnerability in Cisco Webex Teams could allow an unauthen…4.3
Are you affected by CVE-2021-1236?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST