CVE-2021-1494

Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of specific HTTP header parameters. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass a configured file policy for HTTP packets and deliver a malicious payload.

• CWE-693

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http-fp-bp-KfDdcQhc

Published

Nov 15, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1488A vulnerability in the upgrade process of Cisco Adaptive Sec…6.7
• CVE-2021-1489A vulnerability in filesystem usage management for Cisco Fir…6.5
• CVE-2021-1490A vulnerability in the web-based management interface of Cis…6.1
• CVE-2021-1491A vulnerability in the web-based management interface of Cis…6.5
• CVE-2021-1492The Duo Authentication Proxy installer prior to 5.2.1 did no…7.1
• CVE-2021-1493A vulnerability in the web services interface of Cisco Adapt…7.1
• CVE-2021-1495Multiple Cisco products are affected by a vulnerability in t…5.3
• CVE-2021-1496Multiple vulnerabilities in the install, uninstall, and upgr…7.8
• CVE-2021-1497Multiple vulnerabilities in the web-based management interfa…9.8
• CVE-2021-1498Multiple vulnerabilities in the web-based management interfa…9.8
• CVE-2021-1499A vulnerability in the web-based management interface of Cis…5.3
• CVE-2021-1500A vulnerability in the web-based management interface of Cis…6.1