CVE-2021-34790

medium Cisco
CVSS v3 Base Score
4.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
EPSS Score
1.1%
Exploitation probability in 30 days
Top 37% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Confidentiality
None
Integrity
Low
Availability
None
Published: October 27, 2021 (1775 days ago)
Last Modified: August 11, 2026
Vendor: Cisco
Source: NVD

Description

Multiple vulnerabilities in the Application Level Gateway (ALG) for the Network Address Translation (NAT) feature of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass the ALG and open unauthorized connections with a host located behind the ALG. For more information about these vulnerabilities, see the Details section of this advisory. Note: These vulnerabilities have been publicly discussed as NAT Slipstreaming.

CWE

CWE-358

Affected Products

cisco adaptive security appliancecisco secure firewall threat defensecisco adaptive security appliance softwarecisco asa 5512-x firmwarecisco asa 5505 firmwarecisco asa 5515-x firmwarecisco asa 5525-x firmwarecisco asa 5545-x firmwarecisco asa 5555-x firmwarecisco asa 5580 firmware

References

🔗 tools.cisco.com 🔗 tools.cisco.com