Summary

• The April 28, 2021 release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication includes 5 Cisco Security Advisories that describe 6 vulnerabilities in Cisco ASA, FMC, and FTD Software. Cisco has released software updates for these vulnerabilities. 

  All of these vulnerabilities have a Security Impact Rating (SIR) of High. 

Details

• The following table identifies Cisco Security content that is associated with this bundled publication: 

  Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score
  cisco-sa-asa-ftd-sipdos-GGwmMerC Cisco Adaptive Security Appliance Software and Cisco Firepower Threat Defense Software SIP Denial of Service Vulnerability	CVE-2021-1501	High	8.6
  cisco-sa-memc-dos-fncTyYKG Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Buffer Overflow Denial of Service Vulnerability	CVE-2021-1493	High	8.5
  cisco-sa-asa-ftd-vpn-dos-fpBcpEcD Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services VPN Denial of Service Vulnerabilities	CVE-2021-1445 CVE-2021-1504	High	8.6
  cisco-sa-ftd-cmdinj-vWY5wqZT Cisco Firepower Threat Defense Software Command Injection Vulnerability	CVE-2021-1448	High	7.8
  cisco-sa-ftd-ssl-decrypt-dos-DdyLuK6c Cisco Firepower Threat Defense Software SSL Decryption Policy Denial of Service Vulnerability	CVE-2021-1402	High	8.6

   

  Related Resources

  Cisco Security Vulnerability Policy
  MITRE Common Vulnerabilities and Exposures
  Common Vulnerability Scoring System and the Security Impact Rating
  Common Vulnerability Scoring System Q & A