CVE-2021-34794

A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to query SNMP data. This vulnerability is due to ineffective access control. An attacker could exploit this vulnerability by sending an SNMPv3 query to an affected device from a host that is not permitted by the SNMPv3 access control list. A successful exploit could allow the attacker to send an SNMP query to an affected device and retrieve information from the device. The attacker would need valid credentials to perform the SNMP query.

• CWE-284

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-snmpaccess-M6yOweq3Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-snmpaccess-M6yOweq3Vendor Advisory

Published

Oct 27, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34789A vulnerability in the web-based management interface of Cis…4.8
• CVE-2021-3479There's a flaw in OpenEXR's Scanline API functionality in ve…5.5
• CVE-2021-34790Multiple vulnerabilities in the Application Level Gateway (A…5.3
• CVE-2021-34791Multiple vulnerabilities in the Application Level Gateway (A…5.3
• CVE-2021-34792A vulnerability in the memory management of Cisco Adaptive S…7.5
• CVE-2021-34793A vulnerability in the TCP Normalizer of Cisco Adaptive Secu…8.6
• CVE-2021-34795Multiple vulnerabilities in the web-based management interfa…9.8
• CVE-2021-34797Apache Geode versions up to 1.12.4 and 1.13.4 are vulnerable…7.5
• CVE-2021-34798Malformed requests may cause the server to dereference a NUL…7.5
• CVE-2021-3480A flaw was found in slapi-nis in versions before 0.56.7. A N…7.5
• CVE-2021-34800Sensitive information could be logged. The following product…7.5
• CVE-2021-34801Valine 1.4.14 allows remote attackers to cause a denial of s…5.3