CVE-2021-1573

HIGH

Cisco ASA & FTD Unauthenticated DoS via HTTPS Request Parsing

Title source: llm
STIX 2.1

Description

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper input validation when parsing HTTPS requests. An attacker could exploit this vulnerability by sending a malicious HTTPS request to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

References (1)

Core 1

Scores

CVSS v3 8.6
EPSS 0.0018
EPSS Percentile 39.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-121 CWE-787
Status published
Products (4)
cisco/adaptive_security_appliance < 9.7
cisco/adaptive_security_appliance_software 9.8 - 9.8.4.40
cisco/firepower_threat_defense 7.0.0
cisco/firepower_threat_defense < 6.2.2
Published Jan 11, 2022
Tracked Since Feb 18, 2026