CVE-2021-34741

A vulnerability in the email scanning algorithm of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to perform a denial of service (DoS) attack against an affected device. This vulnerability is due to insufficient input validation of incoming emails. An attacker could exploit this vulnerability by sending a crafted email through Cisco ESA. A successful exploit could allow the attacker to exhaust all the available CPU resources on an affected device for an extended period of time, preventing other emails from being processed and resulting in a DoS condition.

CVSS v3 7.5 HIGH
CVSS v2.0 5.0 MEDIUM

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References

Link	Resource
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-dos-JOm9ETfO	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:cisco:asyncos::::::::
	cpe:2.3:o:cisco:asyncos:13.5.3-010:::::::*
	cpe:2.3:o:cisco:asyncos:13.7.0-093:::::::*

OR	cpe:2.3:h:cisco:m170:-:::::::*
	cpe:2.3:h:cisco:m190:-:::::::*
	cpe:2.3:h:cisco:m380:-:::::::*
	cpe:2.3:h:cisco:m390:-:::::::*
	cpe:2.3:h:cisco:m390x:-:::::::*
	cpe:2.3:h:cisco:m680:-:::::::*
	cpe:2.3:h:cisco:m690:-:::::::*
	cpe:2.3:h:cisco:m690x:-:::::::*
	cpe:2.3:h:cisco:s195:-:::::::*
	cpe:2.3:h:cisco:s395:-:::::::*
	cpe:2.3:h:cisco:s695:-:::::::*

History

No history.

Information

Published : 2021-11-04 16:15

Updated : 2024-02-28 18:48

NVD link : CVE-2021-34741

Mitre link : CVE-2021-34741

CVE.ORG link : CVE-2021-34741

JSON object : View

Products Affected

cisco

asyncos
m190
m390
m680
s195
m390x
m690
m690x
s695
m380
s395
m170

CWE

CWE-770

Allocation of Resources Without Limits or Throttling

{"id": "CVE-2021-34741", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Secondary", "source": "ykramarz@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2021-11-04T16:15:08.660", "references": [{"url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-dos-JOm9ETfO", "tags": ["Vendor Advisory"], "source": "ykramarz@cisco.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-770"}]}, {"type": "Secondary", "source": "ykramarz@cisco.com", "description": [{"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the email scanning algorithm of Cisco AsyncOS software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to perform a denial of service (DoS) attack against an affected device. This vulnerability is due to insufficient input validation of incoming emails. An attacker could exploit this vulnerability by sending a crafted email through Cisco ESA. A successful exploit could allow the attacker to exhaust all the available CPU resources on an affected device for an extended period of time, preventing other emails from being processed and resulting in a DoS condition."}, {"lang": "es", "value": "Una vulnerabilidad en el algoritmo de an\u00e1lisis del correo electr\u00f3nico del software Cisco AsyncOS para Cisco Email Security Appliance (ESA) podr\u00eda permitir a un atacante remoto no autenticado llevar a cabo un ataque de denegaci\u00f3n de servicio (DoS) contra un dispositivo afectado. Esta vulnerabilidad es debido a que la comprobaci\u00f3n de entrada de los correos electr\u00f3nicos entrantes es insuficiente. Un atacante podr\u00eda explotar esta vulnerabilidad mediante el env\u00edo de un correo electr\u00f3nico dise\u00f1ado mediante Cisco ESA. Una explotaci\u00f3n con \u00e9xito podr\u00eda permitir al atacante agotar todos los recursos de CPU disponibles en un dispositivo afectado durante un per\u00edodo prolongado de tiempo, impidiendo que otros correos electr\u00f3nicos sean procesados y dando lugar a una condici\u00f3n de DoS"}], "lastModified": "2023-11-07T03:36:16.467", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "415C4EC7-44E1-4C07-85F0-665A186237EC", "versionEndExcluding": "13.0.4"}, {"criteria": "cpe:2.3:o:cisco:asyncos:13.5.3-010:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2CCDF88-877D-4CB0-B7BD-24D317FA6F16"}, {"criteria": "cpe:2.3:o:cisco:asyncos:13.7.0-093:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E94354C-6D93-4136-A4B6-5F926E02CA12"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:m170:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1BD3B1B3-3AFD-4B4A-9FCC-F2EEFA497032"}, {"criteria": "cpe:2.3:h:cisco:m190:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A56CF47B-72C9-4590-89B0-59D43CA65894"}, {"criteria": "cpe:2.3:h:cisco:m380:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "81DBE5E7-524E-458C-BA56-AA806A55ACAE"}, {"criteria": "cpe:2.3:h:cisco:m390:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5DFD07C1-F2A7-4DCE-8269-C8B3D2DE1C22"}, {"criteria": "cpe:2.3:h:cisco:m390x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9107B3CD-A607-4C11-ACAC-ACE66DDA51F8"}, {"criteria": "cpe:2.3:h:cisco:m680:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "86AFDB92-73A0-4FF1-976E-0CD9D342A712"}, {"criteria": "cpe:2.3:h:cisco:m690:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "2BA39FE7-9CDA-41D3-B31D-33F9DB2FB0B0"}, {"criteria": "cpe:2.3:h:cisco:m690x:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E68E58E5-00AB-41BB-85C0-6D65359A4DA3"}, {"criteria": "cpe:2.3:h:cisco:s195:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9797CD28-48A3-45BD-BF68-F0DF6F5A5579"}, {"criteria": "cpe:2.3:h:cisco:s395:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C6D20279-8176-449A-AF4C-E2C90F370B30"}, {"criteria": "cpe:2.3:h:cisco:s695:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D9408ADA-7A8F-4528-8236-65713CF642D5"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ykramarz@cisco.com"}