CVE:CVE-2021-34794
CNNVD:CNNVD-202110-1964
Cisco Firepower Threat Defense（FTD）是美国思科（Cisco）公司的一套提供下一代防火墙服务的统一软件。
Cisco Firepower Threat Defense（FTD）和Cisco Adaptive Security Appliances Software（ASA Software）存在安全漏洞，该漏洞源于访问控制无效。攻击者可以通过从 SNMPv3 访问控制列表不允许的主机向受影响的设备发送 SNMPv3 查询来利用此漏洞。成功的利用可能允许攻击者向受影响的设备发送 SNMP 查询并从设备中检索信息。攻击者需要有效凭据才能执行 SNMP 查询。
solution:Upgrade cisco firepower_threat_defense to a higher version than 6.4.0.13,6.6.5,6.7.0.1,and avoid the version [6.4.0,6.4.0.13),[6.5.0,6.6.5),[6.7.0,6.7.0.1); Upgrade cisco adaptive_security_appliance_software to a higher version than 9.14.2.4,9.15.1.7,and avoid the version [9.14.0,9.14.2.4),[9.15.0,9.15.1.7); Upgrade cisco asa_5512-x_firmware to a higher version than 009.014(001,099.015(001.033,099.016(001.216,and avoid the version 009.014(001),099.015(001.033),099.016(001.216); Upgrade cisco asa_5505_firmware to a higher version than 009.014(001,099.015(001.033,099.016(001.216,and avoid the version 009.014(001),099.015(001.033),099.016(001.216); Upgrade cisco asa_5515-x_firmware to a higher version than 009.014(001,099.015(001.033,099.016(001.216,and avoid the version 009.014(001),099.015(001.033),099.016(001.216); Upgrade cisco asa_5525-x_firmware to a higher version than 009.014(001,099.015(001.033,099.016(001.216,and avoid the version 009.014(001),099.015(001.033),099.016(001.216); Upgrade cisco asa_5545-x_firmware to a higher version than 009.014(001,099.015(001.033,099.016(001.216,and avoid the version 009.014(001),099.015(001.033),099.016(001.216); Upgrade cisco asa_5555-x_firmware to a higher version than 009.014(001,099.015(001.033,099.016(001.216,and avoid the version 009.014(001),099.015(001.033),099.016(001.216); Upgrade cisco asa_5580_firmware to a higher version than 009.014(001,099.015(001.033,099.016(001.216,and avoid the version 009.014(001),099.015(001.033),099.016(001.216); Upgrade cisco asa_5585-x_firmware to a higher version than 009.014(001,099.015(001.033,099.016(001.216,and avoid the version 009.014(001),099.015(001.033),099.016(001.216)