Summary

• Cisco released its semiannual Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication on October 27, 2021. In direct response to customer feedback, Cisco releases bundles of Cisco ASA, FMC, and FTD Software Security Advisories on the fourth Wednesday of the month in April and October of each calendar year.

  The October 27, 2021, release of the Cisco ASA, FMC, and FTD Software Security Advisory Bundled Publication includes 19 Cisco Security Advisories that describe 27 vulnerabilities in Cisco ASA, FMC, and FTD. Cisco has released software updates that address these vulnerabilities.

Details

• The following table identifies Cisco Security content that is associated with this bundled publication:

  Cisco Security Advisory	CVE ID	Security Impact Rating	CVSS Base Score
  cisco-sa-ftd-tls-decrypt-dos-BMxYjm8M Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Software-Based SSL/TLS Denial of Service Vulnerability	CVE-2021-34783	High	8.6
  cisco-sa-asa-ftd-dos-Unk689XY Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Resource Exhaustion Denial of Service Vulnerability	CVE-2021-34792	High	8.6
  cisco-sa-asaftd-dos-4ygzLKU9 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SSL/TLS Denial of Service Vulnerability	CVE-2021-40117	High	8.6
  cisco-sa-asa-ftd-dos-JxYWMJyL Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Transparent Mode Denial of Service Vulnerability	CVE-2021-34793	High	8.6
  cisco-sa-asafdt-webvpn-dos-KSqJAKPA Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Denial of Service Vulnerabilities	CVE-2021-1573 CVE-2021-34704 CVE-2021-40118	High	8.6
  cisco-sa-ftd-dos-rUDseW3r Cisco Firepower Threat Defense Software SSH Connections Denial of Service Vulnerability	CVE-2021-34781	High	8.6
  cisco-sa-snort-dos-RywH7ezM Multiple Cisco Products Snort Rule Denial of Service Vulnerability	CVE-2021-40116	High	8.6
  cisco-sa-fmc-dir-traversal-95UyW5tk Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability	CVE-2021-34762	High	8.1
  cisco-sa-ftd-cmdinject-FmzsLN8 Cisco Firepower Threat Defense Software Command Injection Vulnerabilities	CVE-2021-34752 CVE-2021-34755 CVE-2021-34756	High	7.8
  cisco-sa-snort-dos-s2R7W9UU Multiple Cisco Products Snort Memory Leak Denial of Service Vulnerability	CVE-2021-40114	Medium	6.8
  cisco-sa-asaftd-xss-webui-gQLSFyPM Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Interface Cross-Site Scripting Vulnerability	CVE-2021-1444	Medium	6.1
  cisco-sa-ftd-enip-bypass-eFsxd8KP Cisco Firepower Threat Defense Software Ethernet Industrial Protocol Policy Bypass Vulnerabilities	CVE-2021-34753 CVE-2021-34754	Medium	5.8
  cisco-sa-asaftd-rule-bypass-ejjOgQEY Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Identity-Based Rule Bypass Vulnerability	CVE-2021-34787	Medium	5.3
  cisco-sa-asaftd-ikev2-dos-g4cmrr7C Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software IKEv2 Site-to-Site VPN Denial of Service Vulnerability	CVE-2021-40125	Medium	5.3
  cisco-sa-asaftd-snmpaccess-M6yOweq3 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Access Control Vulnerability	CVE-2021-34794	Medium	5.3
  cisco-sa-fmc-xss-openredir-TVPMWJyg Cisco Firepower Management Center Software Cross-Site Scripting and Open Redirect Vulnerabilities	CVE-2021-34763 CVE-2021-34764	Medium	4.8
  cisco-sa-natalg-bypass-cpKGqkng Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Application Level Gateway Bypass Vulnerabilities	CVE-2021-34790 CVE-2021-34791	Medium	4.7
  cisco-sa-ftd-file-write-SHVcmQVc Cisco Firepower Threat Defense Software CLI Arbitrary File Write Vulnerability	CVE-2021-34761	Medium	4.4
  cisco-sa-fmc-infodisc-Ft2WVmNU Cisco Firepower Management Center Software Configuration Information Disclosure Vulnerabilities	CVE-2021-34750 CVE-2021-34751	Medium	4.3

   

  Related Resources

  Cisco Security Vulnerability Policy
  MITRE Common Vulnerabilities and Exposures
  Common Vulnerability Scoring System and the Security Impact Rating
  Common Vulnerability Scoring System Q & A