CVE-2021-34790
Last modified
CVE-2021-34790 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized connections with a host located behind the ALG. For more information about these vulnerabilities, see the Details section of this advisory. EPSS estimates a 1.10% chance of exploitation in the next 30 days.
Description
Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized connections with a host located behind the ALG. For more information about these vulnerabilities, see the Details section of this advisory. Note: These vulnerabilities have been publicly discussed as NAT Slipstreaming.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Adaptive Security Appliance | < 9.8.4.40 |
| Cisco | Secure Firewall Threat Defense | < 6.4.0.12 |
| Cisco | Secure Firewall Threat Defense | >= 6.5.0, < 6.6.5 |
| Cisco | Secure Firewall Threat Defense | >= 6.7.0, < 6.7.0.2 |
| Cisco | Adaptive Security Appliance Software | >= 9.12.0, < 9.12.4.29 |
| Cisco | Adaptive Security Appliance Software | >= 9.13.0, < 9.14.2.15 |
| Cisco | Adaptive Security Appliance Software | >= 9.15.0, < 9.15.1.15 |
| Cisco | Asa 5512-X Firmware | 009.008 |
| Cisco | Asa 5512-X Firmware | 009.015 |
| Cisco | Asa 5505 Firmware | 009.008 |
| Cisco | Asa 5505 Firmware | 009.015 |
| Cisco | Asa 5515-X Firmware | 009.008 |
| Cisco | Asa 5515-X Firmware | 009.015 |
| Cisco | Asa 5525-X Firmware | 009.008 |
| Cisco | Asa 5525-X Firmware | 009.015 |
| Cisco | Asa 5545-X Firmware | 009.008 |
| Cisco | Asa 5545-X Firmware | 009.015 |
| Cisco | Asa 5555-X Firmware | 009.008 |
| Cisco | Asa 5555-X Firmware | 009.015 |
| Cisco | Asa 5580 Firmware | 009.008 |
| Cisco | Asa 5580 Firmware | 009.015 |
| Cisco | Asa 5585-X Firmware | 009.008 |
| Cisco | Asa 5585-X Firmware | 009.015 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-34790?
How severe is CVE-2021-34790?
How do I fix CVE-2021-34790?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-34785Multiple vulnerabilities in Cisco BroadWorks CommPilot Appli…7.2
- CVE-2021-34786Multiple vulnerabilities in Cisco BroadWorks CommPilot Appli…4.9
- CVE-2021-34787A vulnerability in the identity-based firewall (IDFW) rule p…5.3
- CVE-2021-34788A vulnerability in the shared library loading mechanism of C…7
- CVE-2021-34789A vulnerability in the web-based management interface of Cis…4.8
- CVE-2021-3479There's a flaw in OpenEXR's Scanline API functionality in ve…5.5
- CVE-2021-34791Multiple vulnerabilities in the Application Level Gateway (A…5.3
- CVE-2021-34792A vulnerability in the memory management of Cisco Adaptive S…7.5
- CVE-2021-34793A vulnerability in the TCP Normalizer of Cisco Adaptive Secu…8.6
- CVE-2021-34794A vulnerability in the Simple Network Management Protocol ve…5.3
- CVE-2021-34795Multiple vulnerabilities in the web-based management interfa…9.8
- CVE-2021-34797Apache Geode versions up to 1.12.4 and 1.13.4 are vulnerable…7.5
Are you affected by CVE-2021-34790?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST