CVE-2021-1236
MediumCVSS 5.3Exploitation Probability (EPSS)
High risk80th percentile - higher than 80% of all known CVEs
Summary
A vulnerability in the Snort application detection engine of multiple Cisco products could allow an unauthenticated, remote attacker to bypass configured policies. The issue is due to a flaw in the detection algorithm. An attacker could send crafted packets through an affected system, potentially bypassing policies and delivering a malicious payload.
Risk Assessment
The risk is that an attacker can bypass security policies and deliver malware to the protected network.
Recommendation
It is recommended to upgrade to a patched version and follow vendor guidance.
Original NVD description (English source)
Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit this vulnerability by sending crafted packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network.