CVE-2021-34790

תיאור (מקור, אנגלית)

Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized connections with a host located behind the ALG. For more information about these vulnerabilities, see the Details section of this advisory. Note: These vulnerabilities have been publicly discussed as NAT Slipstreaming.

מדדים

CVSS 3.1

5.3 (MEDIUM) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS — סבירות ניצול

1% (אחוזון 100) נכון ל-19/8/2026

CWE

CWE-358, CWE-20

מוצרים מושפעים

cisco: adaptive security appliance; cisco: secure firewall threat defense; cisco: adaptive security appliance software; cisco: asa 5512-x firmware; cisco: asa 5512-x; cisco: asa 5505 firmware; cisco: asa 5505; cisco: asa 5515-x firmware; cisco: asa 5515-x; cisco: asa 5525-x firmware; cisco: asa 5525-x; cisco: asa 5545-x firmware; cisco: asa 5545-x; cisco: asa 5555-x firmware; cisco: asa 5555-x

קישורים

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa‮… Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa‮… Vendor Advisory