CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-1224

Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect detection of the HTTP payload if it is contained at least partially within the TFO connection handshake. An attacker could exploit this vulnerability by sending crafted TFO packets with an HTTP payload through an affected device. A successful exploit could allow the attacker to bypass configured file policy for HTTP packets and deliver a malicious payload.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.02

EPSS Ranking 79.0%

CVSS Severity

CVSS v3 Score 5.8

CVSS v2 Score 5.0

References

Products affected by CVE-2021-1224

Cisco » Secure Firewall Management Center » Version: 2.9.14.0

cpe:2.3:a:cisco:secure_firewall_management_center:2.9.14.0
Cisco » Secure Firewall Management Center » Version: 2.9.15

cpe:2.3:a:cisco:secure_firewall_management_center:2.9.15
Cisco » Secure Firewall Management Center » Version: 2.9.17

cpe:2.3:a:cisco:secure_firewall_management_center:2.9.17
Cisco » Secure Firewall Management Center » Version: 2.9.18

cpe:2.3:a:cisco:secure_firewall_management_center:2.9.18
Cisco » Secure Firewall Management Center » Version: 3.0.1

cpe:2.3:a:cisco:secure_firewall_management_center:3.0.1
Cisco » Secure Firewall Threat Defense » Version: N/A

cpe:2.3:a:cisco:secure_firewall_threat_defense:-
Cisco » Secure Firewall Threat Defense » Version: 5.3.0

cpe:2.3:a:cisco:secure_firewall_threat_defense:5.3.0
Cisco » Secure Firewall Threat Defense » Version: 5.4.0

cpe:2.3:a:cisco:secure_firewall_threat_defense:5.4.0
Cisco » Secure Firewall Threat Defense » Version: 6.0.0

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.0.0
Cisco » Secure Firewall Threat Defense » Version: 6.0.0.1

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.0.0.1
Cisco » Secure Firewall Threat Defense » Version: 6.0.1

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.0.1
Cisco » Secure Firewall Threat Defense » Version: 6.0.1.1

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.0.1.1
Cisco » Secure Firewall Threat Defense » Version: 6.0.1.2

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.0.1.2
Cisco » Secure Firewall Threat Defense » Version: 6.0.1.3

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.0.1.3
Cisco » Secure Firewall Threat Defense » Version: 6.0.1.4

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.0.1.4
Cisco » Secure Firewall Threat Defense » Version: 6.1.0

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.1.0
Cisco » Secure Firewall Threat Defense » Version: 6.1.0.1

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.1.0.1
Cisco » Secure Firewall Threat Defense » Version: 6.1.0.2

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.1.0.2
Cisco » Secure Firewall Threat Defense » Version: 6.1.0.3

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.1.0.3
Cisco » Secure Firewall Threat Defense » Version: 6.1.0.4

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.1.0.4
Cisco » Secure Firewall Threat Defense » Version: 6.1.0.5

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.1.0.5
Cisco » Secure Firewall Threat Defense » Version: 6.1.0.6

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.1.0.6
Cisco » Secure Firewall Threat Defense » Version: 6.1.0.7

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.1.0.7
Cisco » Secure Firewall Threat Defense » Version: 6.2.0

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.0
Cisco » Secure Firewall Threat Defense » Version: 6.2.0.1

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.0.1
Cisco » Secure Firewall Threat Defense » Version: 6.2.0.2

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.0.2
Cisco » Secure Firewall Threat Defense » Version: 6.2.0.3

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.0.3
Cisco » Secure Firewall Threat Defense » Version: 6.2.0.4

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.0.4
Cisco » Secure Firewall Threat Defense » Version: 6.2.0.5

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.0.5
Cisco » Secure Firewall Threat Defense » Version: 6.2.0.6

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.0.6
Cisco » Secure Firewall Threat Defense » Version: 6.2.1

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.1
Cisco » Secure Firewall Threat Defense » Version: 6.2.2

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.2
Cisco » Secure Firewall Threat Defense » Version: 6.2.2.1

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.2.1
Cisco » Secure Firewall Threat Defense » Version: 6.2.2.2

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.2.2
Cisco » Secure Firewall Threat Defense » Version: 6.2.2.3

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.2.3
Cisco » Secure Firewall Threat Defense » Version: 6.2.2.4

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.2.4
Cisco » Secure Firewall Threat Defense » Version: 6.2.2.5

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.2.5
Cisco » Secure Firewall Threat Defense » Version: 6.2.3

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.0

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.0
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.1

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.1
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.10

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.10
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.11

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.11
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.12

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.12
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.13

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.13
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.14

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.14
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.15

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.15
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.16

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.16
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.17

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.17
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.18

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.18
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.2

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.2
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.3

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.3
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.4

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.4
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.5

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.5
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.6

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.6
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.7

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.7
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.8

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.8
Cisco » Secure Firewall Threat Defense » Version: 6.2.3.9

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.2.3.9
Cisco » Secure Firewall Threat Defense » Version: 6.3.0

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.3.0
Cisco » Secure Firewall Threat Defense » Version: 6.3.0.1

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.3.0.1
Cisco » Secure Firewall Threat Defense » Version: 6.3.0.2

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.3.0.2
Cisco » Secure Firewall Threat Defense » Version: 6.3.0.3

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.3.0.3
Cisco » Secure Firewall Threat Defense » Version: 6.3.0.4

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.3.0.4
Cisco » Secure Firewall Threat Defense » Version: 6.3.0.5

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.3.0.5
Cisco » Secure Firewall Threat Defense » Version: 6.3.0.6

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.3.0.6
Cisco » Secure Firewall Threat Defense » Version: 6.4.0

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.1

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.1
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.10

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.10
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.11

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.11
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.12

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.12
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.13

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.13
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.14

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.14
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.15

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.15
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.16

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.16
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.17

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.17
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.18

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.18
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.2

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.2
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.3

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.3
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.4

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.4
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.5

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.5
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.6

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.6
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.7

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.7
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.8

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.8
Cisco » Secure Firewall Threat Defense » Version: 6.4.0.9

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.0.9
Cisco » Secure Firewall Threat Defense » Version: 6.4.1

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.4.1
Cisco » Secure Firewall Threat Defense » Version: 6.5.0

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.5.0
Cisco » Secure Firewall Threat Defense » Version: 6.5.0.1

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.5.0.1
Cisco » Secure Firewall Threat Defense » Version: 6.5.0.2

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.5.0.2
Cisco » Secure Firewall Threat Defense » Version: 6.5.0.3

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.5.0.3
Cisco » Secure Firewall Threat Defense » Version: 6.5.0.4

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.5.0.4
Cisco » Secure Firewall Threat Defense » Version: 6.5.0.5

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.5.0.5
Cisco » Secure Firewall Threat Defense » Version: 6.6.0

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0
Cisco » Secure Firewall Threat Defense » Version: 6.6.0.1

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.0.1
Cisco » Secure Firewall Threat Defense » Version: 6.6.1

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.1
Cisco » Secure Firewall Threat Defense » Version: 6.6.3

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.3
Cisco » Secure Firewall Threat Defense » Version: 6.6.4

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.4
Cisco » Secure Firewall Threat Defense » Version: 6.6.5

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5
Cisco » Secure Firewall Threat Defense » Version: 6.6.5.1

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5.1
Cisco » Secure Firewall Threat Defense » Version: 6.6.5.2

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.5.2
Cisco » Secure Firewall Threat Defense » Version: 6.6.7

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.7
Cisco » Secure Firewall Threat Defense » Version: 6.6.7.1

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.7.1
Cisco » Secure Firewall Threat Defense » Version: 6.6.7.2

cpe:2.3:a:cisco:secure_firewall_threat_defense:6.6.7.2
Cisco » 1100-4p Integrated Services Router » Version: N/A

cpe:2.3:h:cisco:1100-4p_integrated_services_router:-
Cisco » 1100-8p Integrated Services Router » Version: N/A

cpe:2.3:h:cisco:1100-8p_integrated_services_router:-
Cisco » 1101-4p Integrated Services Router » Version: N/A

cpe:2.3:h:cisco:1101-4p_integrated_services_router:-
Cisco » 1109-4p Integrated Services Router » Version: N/A

cpe:2.3:h:cisco:1109-4p_integrated_services_router:-
Cisco » 4321 Integrated Services Router » Version: N/A

cpe:2.3:h:cisco:4321_integrated_services_router:-
Cisco » 4331 Integrated Services Router » Version: N/A

cpe:2.3:h:cisco:4331_integrated_services_router:-
Cisco » 4351 Integrated Services Router » Version: N/A

cpe:2.3:h:cisco:4351_integrated_services_router:-
Cisco » 4451-X Integrated Services Router » Version: N/A

cpe:2.3:h:cisco:4451-x_integrated_services_router:-
Cisco » 4461 Integrated Services Router » Version: N/A

cpe:2.3:h:cisco:4461_integrated_services_router:-
Cisco » Csr 1000v » Version: N/A

cpe:2.3:h:cisco:csr_1000v:-
Cisco » Meraki Mx100 » Version: N/A

cpe:2.3:h:cisco:meraki_mx100:-
Cisco » Meraki Mx250 » Version: N/A

cpe:2.3:h:cisco:meraki_mx250:-
Cisco » Meraki Mx450 » Version: N/A

cpe:2.3:h:cisco:meraki_mx450:-
Cisco » Meraki Mx64 » Version: N/A

cpe:2.3:h:cisco:meraki_mx64:-
Cisco » Meraki Mx64w » Version: N/A

cpe:2.3:h:cisco:meraki_mx64w:-
Cisco » Meraki Mx67 » Version: N/A

cpe:2.3:h:cisco:meraki_mx67:-
Cisco » Meraki Mx67c » Version: N/A

cpe:2.3:h:cisco:meraki_mx67c:-
Cisco » Meraki Mx67w » Version: N/A

cpe:2.3:h:cisco:meraki_mx67w:-
Cisco » Meraki Mx68 » Version: N/A

cpe:2.3:h:cisco:meraki_mx68:-
Cisco » Meraki Mx68cw » Version: N/A

cpe:2.3:h:cisco:meraki_mx68cw:-
Cisco » Meraki Mx68w » Version: N/A

cpe:2.3:h:cisco:meraki_mx68w:-
Cisco » Meraki Mx84 » Version: N/A

cpe:2.3:h:cisco:meraki_mx84:-
Cisco » Meraki Mx100 Firmware » Version: N/A

cpe:2.3:o:cisco:meraki_mx100_firmware:-
Cisco » Meraki Mx250 Firmware » Version: N/A

cpe:2.3:o:cisco:meraki_mx250_firmware:-
Cisco » Meraki Mx64 Firmware » Version: N/A

cpe:2.3:o:cisco:meraki_mx64_firmware:-
Cisco » Meraki Mx67 Firmware » Version: N/A

cpe:2.3:o:cisco:meraki_mx67_firmware:-
Cisco » Meraki Mx67c Firmware » Version: N/A

cpe:2.3:o:cisco:meraki_mx67c_firmware:-
Cisco » Meraki Mx67w Firmware » Version: N/A

cpe:2.3:o:cisco:meraki_mx67w_firmware:-
Cisco » Meraki Mx68 Firmware » Version: N/A

cpe:2.3:o:cisco:meraki_mx68_firmware:-
Cisco » Meraki Mx68cw Firmware » Version: N/A

cpe:2.3:o:cisco:meraki_mx68cw_firmware:-
Cisco » Meraki Mx68w Firmware » Version: N/A

cpe:2.3:o:cisco:meraki_mx68w_firmware:-
Cisco » Meraki Mx84 Firmware » Version: N/A

cpe:2.3:o:cisco:meraki_mx84_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-1224

Products

Pricing

Contact Us