CVE-2021-1566
Description
A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to intercept traffic between an affected device and the AMP servers. This vulnerability is due to improper certificate validation when an affected device establishes TLS connections. A man-in-the-middle attacker could exploit this vulnerability by sending a crafted TLS packet to an affected device. A successful exploit could allow the attacker to spoof a trusted host and then extract sensitive information or alter certain API requests.
How to fix
- cisco asyncos12.5.3-035, 13.0.0-030, 13.5.3-010, 11.8.3-021, 12.0.3-005, 12.5.1-043 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco email_security_appliance | No range specified | — |
| cisco asyncos | v < 12.5.3-035, 13.0 ≤ v < 13.0.0-030, 13.5 ≤ v < 13.5.3-010, v < 11.8.3-021, 12.0.0 ≤ v < 12.0.3-005, 12.5.0 ≤ v < 12.5.1-043 | 12.5.3-035, 13.0.0-030, 13.5.3-010, 11.8.3-021, 12.0.3-005, 12.5.1-043 |
| cisco web_security_appliance | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.