CVE-2021-34704

HIGH

Cisco ASA & FTD - Unauthenticated DoS via HTTPS Request Parsing

Title source: llm
STIX 2.1

Description

A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a denial of service (DoS) condition. This vulnerability is due to improper input validation when parsing HTTPS requests. An attacker could exploit this vulnerability by sending a malicious HTTPS request to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.

References (1)

Core 1

Scores

CVSS v3 8.6
EPSS 0.0025
EPSS Percentile 48.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-121 CWE-787
Status published
Products (3)
cisco/adaptive_security_appliance_software 9.15 - 9.15.1.17
cisco/firepower_threat_defense 7.0.0
cisco/firepower_threat_defense 6.7.0 - 6.7.0.3
Published Jan 11, 2022
Tracked Since Feb 18, 2026