{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-1285", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2020-11-13T00:00:00.000Z", "datePublished": "2024-11-18T15:41:50.263Z", "dateUpdated": "2024-11-18T16:22:54.977Z"}, "containers": {"cna": {"title": "Multiple Cisco Products SNORT Ethernet Frame Decoder Denial of Service Vulnerability", "metrics": [{"format": "cvssV3_0", "cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:X/RL:X/RC:X", "baseScore": 7.4, "baseSeverity": "HIGH", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}}], "descriptions": [{"lang": "en", "value": "Multiple Cisco products are affected by a vulnerability in the Ethernet Frame Decoder of the Snort detection engine that could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition.\r\nThe vulnerability is due to improper handling of error conditions when processing Ethernet frames. An attacker could exploit this vulnerability by sending malicious Ethernet frames through an affected device. A successful exploit could allow the attacker to exhaust disk space on the affected device, which could result in administrators being unable to log in to the device or the device being unable to boot up correctly.Note: Manual intervention is required to recover from this situation. Customers are advised to contact the Cisco Technical Assistance Center (TAC) to help recover a device in this condition.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-ethernet-dos-HGXgJH8n", "name": "cisco-sa-snort-ethernet-dos-HGXgJH8n"}], "exploits": [{"lang": "en", "value": "The Cisco\u00a0Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "source": {"advisory": "cisco-sa-snort-ethernet-dos-HGXgJH8n", "discovery": "EXTERNAL", "defects": ["CSCvt04377"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "Allocation of Resources Without Limits or Throttling", "type": "cwe", "cweId": "CWE-770"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco UTD SNORT IPS Engine Software", "versions": [{"version": "16.12.3", "status": "affected"}, {"version": "Fuji-16.9.5", "status": "affected"}, {"version": "16.12.4", "status": "affected"}, {"version": "17.3.1a", "status": "affected"}, {"version": "16.6.6", "status": "affected"}, {"version": "16.12.2", "status": "affected"}, {"version": "Fuji-16.9.6", "status": "affected"}, {"version": "Fuji-16.9.3", "status": "affected"}, {"version": "Denali-16.3.7", "status": "affected"}, {"version": "Fuji-16.9.2", "status": "affected"}, {"version": "Fuji-16.9.4", "status": "affected"}, {"version": "Everest-16.6.4", "status": "affected"}, {"version": "Everest-16.6.3", "status": "affected"}, {"version": "16.6.5", "status": "affected"}, {"version": "Denali-16.3.5", "status": "affected"}, {"version": "17.2.1r", "status": "affected"}, {"version": "17.1.1", "status": "affected"}, {"version": "Everest-16.6.2", "status": "affected"}, {"version": "16.6.7a", "status": "affected"}, {"version": "Denali-16.3.4", "status": "affected"}, {"version": "16.6.1", "status": "affected"}, {"version": "Denali-16.3.9", "status": "affected"}, {"version": "Denali-16.3.3", "status": "affected"}, {"version": "16.12.1a", "status": "affected"}, {"version": "17.3.2", "status": "affected"}, {"version": "Fuji-16.9.7", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-11-18T15:41:50.263Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-18T16:22:37.298611Z", "id": "CVE-2021-1285", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-18T16:22:54.977Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2021-1285", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-18T16:22:37.298611Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-18T16:22:41.784Z"}}], "cna": {"title": "Multiple Cisco Products SNORT Ethernet Frame Decoder Denial of Service Vulnerability", "source": {"defects": ["CSCvt04377"], "advisory": "cisco-sa-snort-ethernet-dos-HGXgJH8n", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_0", "cvssV3_0": {"scope": "CHANGED", "version": "3.0", "baseScore": 7.4, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H/E:X/RL:X/RC:X", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "Cisco", "product": "Cisco UTD SNORT IPS Engine Software", "versions": [{"status": "affected", "version": "16.12.3"}, {"status": "affected", "version": "Fuji-16.9.5"}, {"status": "affected", "version": "16.12.4"}, {"status": "affected", "version": "17.3.1a"}, {"status": "affected", "version": "16.6.6"}, {"status": "affected", "version": "16.12.2"}, {"status": "affected", "version": "Fuji-16.9.6"}, {"status": "affected", "version": "Fuji-16.9.3"}, {"status": "affected", "version": "Denali-16.3.7"}, {"status": "affected", "version": "Fuji-16.9.2"}, {"status": "affected", "version": "Fuji-16.9.4"}, {"status": "affected", "version": "Everest-16.6.4"}, {"status": "affected", "version": "Everest-16.6.3"}, {"status": "affected", "version": "16.6.5"}, {"status": "affected", "version": "Denali-16.3.5"}, {"status": "affected", "version": "17.2.1r"}, {"status": "affected", "version": "17.1.1"}, {"status": "affected", "version": "Everest-16.6.2"}, {"status": "affected", "version": "16.6.7a"}, {"status": "affected", "version": "Denali-16.3.4"}, {"status": "affected", "version": "16.6.1"}, {"status": "affected", "version": "Denali-16.3.9"}, {"status": "affected", "version": "Denali-16.3.3"}, {"status": "affected", "version": "16.12.1a"}, {"status": "affected", "version": "17.3.2"}, {"status": "affected", "version": "Fuji-16.9.7"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco\u00a0Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-ethernet-dos-HGXgJH8n", "name": "cisco-sa-snort-ethernet-dos-HGXgJH8n"}], "descriptions": [{"lang": "en", "value": "Multiple Cisco products are affected by a vulnerability in the Ethernet Frame Decoder of the Snort detection engine that could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition.\r\nThe vulnerability is due to improper handling of error conditions when processing Ethernet frames. An attacker could exploit this vulnerability by sending malicious Ethernet frames through an affected device. A successful exploit could allow the attacker to exhaust disk space on the affected device, which could result in administrators being unable to log in to the device or the device being unable to boot up correctly.Note: Manual intervention is required to recover from this situation. Customers are advised to contact the Cisco Technical Assistance Center (TAC) to help recover a device in this condition.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-770", "description": "Allocation of Resources Without Limits or Throttling"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2024-11-18T15:41:50.263Z"}}}, "cveMetadata": {"cveId": "CVE-2021-1285", "state": "PUBLISHED", "dateUpdated": "2024-11-18T16:22:54.977Z", "dateReserved": "2020-11-13T00:00:00.000Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2024-11-18T15:41:50.263Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple Cisco products are affected by a vulnerability in the Ethernet Frame Decoder of the Snort detection engine that could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition.\r\nThe vulnerability is due to improper handling of error conditions when processing Ethernet frames. An attacker could exploit this vulnerability by sending malicious Ethernet frames through an affected device. A successful exploit could allow the attacker to exhaust disk space on the affected device, which could result in administrators being unable to log in to the device or the device being unable to boot up correctly.Note: Manual intervention is required to recover from this situation. Customers are advised to contact the Cisco Technical Assistance Center (TAC) to help recover a device in this condition.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability."}, {"lang": "es", "value": "Varios productos de Cisco se ven afectados por una vulnerabilidad en el decodificador de tramas Ethernet del motor de detecci\u00f3n Snort que podr\u00eda permitir que un atacante adyacente no autenticado provoque una condici\u00f3n de denegaci\u00f3n de servicio (DoS). La vulnerabilidad se debe a un manejo inadecuado de las condiciones de error al procesar tramas Ethernet. Un atacante podr\u00eda aprovechar esta vulnerabilidad enviando tramas Ethernet maliciosas a trav\u00e9s de un dispositivo afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir que el atacante agote el espacio en disco en el dispositivo afectado, lo que podr\u00eda provocar que los administradores no puedan iniciar sesi\u00f3n en el dispositivo o que el dispositivo no pueda iniciarse correctamente. Nota: Se requiere intervenci\u00f3n manual para recuperarse de esta situaci\u00f3n. Se recomienda a los clientes que se comuniquen con el Centro de asistencia t\u00e9cnica (TAC) de Cisco para obtener ayuda para recuperar un dispositivo en esta condici\u00f3n. Cisco ha publicado actualizaciones de software que solucionan esta vulnerabilidad. No existen workarounds que solucionen esta vulnerabilidad."}], "id": "CVE-2021-1285", "lastModified": "2024-11-18T17:11:17.393", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 4.0, "source": "ykramarz@cisco.com", "type": "Secondary"}]}, "published": "2024-11-18T16:15:09.087", "references": [{"source": "ykramarz@cisco.com", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-ethernet-dos-HGXgJH8n"}], "sourceIdentifier": "ykramarz@cisco.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-770"}], "source": "ykramarz@cisco.com", "type": "Primary"}]}

{}