March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – Microsoft Windows SAFER/SRP Vulnerabilities
May 3, 2021
Rewterz Threat Alert – Financially Motivated Aggressive Group Carrying Out Ransomware Campaigns – Active IOCs
May 3, 2021
Rewterz Threat Advisory – Microsoft Windows SAFER/SRP Vulnerabilities
May 3, 2021
Rewterz Threat Alert – Financially Motivated Aggressive Group Carrying Out Ransomware Campaigns – Active IOCs
May 3, 2021
Severity
Medium
Analysis Summary
CVE-2021-1223
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass configured file policy for HTTP packets and deliver a malicious payload.
Impact
Unauthorized Access
Affected Vendors
Cisco
Affected Products
- Cisco 3000 Series Industrial Security Appliances
- Cisco Firepower Threat Defense (FTD) Software
- 1000 Series Integrated Services Routers (ISRs)
- 4000 Series Integrated Services Router(ISRs)
- Cloud Services Router 1000V Series
- Integrated Service Virtual Router(ISRs)
Remediation
Refer to cisco advisory for the complete list of affected product and their respective patches.