CVE-2021-34754
MediumCVSS 5.8Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
Multiple vulnerabilities in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic in Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured rules for ENIP traffic. This is due to incomplete processing during deep packet inspection for ENIP packets. An attacker could send a crafted ENIP packet to bypass access control and intrusion policies.
Risk Assessment
The risk is the potential to bypass security controls for ENIP traffic, potentially leading to unauthorized access to industrial systems or policy violations.
Recommendation
It is recommended to update FTD software to a patched version and monitor vendor guidance for ENIP inspection configuration.
Original NVD description (English source)
Multiple vulnerabilities in the payload inspection for Ethernet Industrial Protocol (ENIP) traffic for Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured rules for ENIP traffic. These vulnerabilities are due to incomplete processing during deep packet inspection for ENIP packets. An attacker could exploit these vulnerabilities by sending a crafted ENIP packet to the targeted interface. A successful exploit could allow the attacker to bypass configured access control and intrusion policies that should be activated for the ENIP packet.