Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2021
On March 25, 2021, the OpenSSL Project released a security advisory, OpenSSL Security Advisory [25 March 2021], ["https://www.openssl.org/news/secadv/20210325.txt"] that disclosed two vulnerabilities. Exploitation of these vulnerabilities could allow an attacker to use a valid non-certificate authority (CA) certificate to act as a CA and sign a certificate for an arbitrary organization, user or device, or to cause a denial of service (DoS) condition.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-3450US | high7.4 | Exploit | ||
The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.… | ||||
| CVE-2021-3449US | medium5.9 | Exploit | ||
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms… | ||||
references
External citations — patches, advisories, analysis.
- Cisco Bug Search Toolexternal
- CSCvx82587external
- CSCvx82591external
- CSCvx82599external
- CSCvx82605external
- CSCvx82614external
- CSCvx82617external
- CSCvx82619external
remediations (7)
- FixedCisco HyperFlex HX Data Platform
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco IOS XE Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Identity Services Engine Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco IoT Field Network Director (IoT-FND)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Network Services Orchestrator
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Secure Firewall Adaptive Security Appliance (ASA) Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Secure Firewall Adaptive Security Appliance (ASA) Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan