1. Home
  2. CVE Database
  3. CVE-2021-34794
MEDIUM · 5.3

CVE-2021-34794

A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) S...

Vulnerability Description

A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to query SNMP data. This vulnerability is due to ineffective access control. An attacker could exploit this vulnerability by sending an SNMPv3 query to an affected device from a host that is not permitted by the SNMPv3 access control list. A successful exploit could allow the attacker to send an SNMP query to an affected device and retrieve information from the device. The attacker would need valid credentials to perform the SNMP query.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
CiscoFirepower Threat Defense>= 6.4.0, < 6.4.0.13
CiscoAdaptive Security Appliance Software>= 9.14.0, < 9.14.2.4
CiscoAsa 5512-X Firmware009.014\(001\)
CiscoAsa 5512-X-
CiscoAsa 5505 Firmware009.014\(001\)
CiscoAsa 5505-
CiscoAsa 5515-X Firmware009.014\(001\)
CiscoAsa 5515-X-
CiscoAsa 5525-X Firmware009.014\(001\)
CiscoAsa 5525-X-
CiscoAsa 5545-X Firmware009.014\(001\)
CiscoAsa 5545-X-
CiscoAsa 5555-X Firmware009.014\(001\)
CiscoAsa 5555-X-
CiscoAsa 5580 Firmware009.014\(001\)
CiscoAsa 5580-
CiscoAsa 5585-X Firmware009.014\(001\)
CiscoAsa 5585-X-

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2021-34794?

CVE-2021-34794 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) S...

How severe is CVE-2021-34794?

CVE-2021-34794 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-34794?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Firepower Threat Defense, Cisco Adaptive Security Appliance Software, Cisco Asa 5512-X Firmware, Cisco Asa 5512-X, Cisco Asa 5505 Firmware.