Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2021
On March 25, 2021, the OpenSSL Project released a security advisory, OpenSSL Security Advisory [25 March 2021], ["https://www.openssl.org/news/secadv/20210325.txt"] that disclosed two vulnerabilities. Exploitation of these vulnerabilities could allow an attacker to use a valid non-certificate authority (CA) certificate to act as a CA and sign a certificate for an arbitrary organization, user or device, or to cause a denial of service (DoS) condition.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-3450US | high7.4 | Exploit | ||
The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.… | ||||
| CVE-2021-3449US | medium5.9 | Exploit | ||
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Cisco Bug Search Toolexternal
- CSCvx82587external
- CSCvx82591external
- CSCvx82599external
- CSCvx82605external
- CSCvx82614external
- CSCvx82617external
- CSCvx82619external
Behebungen (7)
- BehobenCisco HyperFlex HX Data Platform
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IOS XE Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Identity Services Engine Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco IoT Field Network Director (IoT-FND)
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Network Services Orchestrator
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Secure Firewall Adaptive Security Appliance (ASA) Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Secure Firewall Adaptive Security Appliance (ASA) Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan