CVE-2021-1402

Name of the Vulnerable Software and Affected Versions Cisco Firepower Threat Defense (FTD) Software (affected versions not specified)

Description A vulnerability in the software-based SSL/TLS message handler could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The issue is due to insufficient validation of SSL/TLS messages when the device performs software-based SSL decryption. An attacker could exploit this by sending a crafted SSL/TLS message through an affected device. A successful exploit could cause a process to crash, triggering a reload of the device. No manual intervention is needed to recover the device after the reload.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.