A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to query SNMP data. This vulnerability is due to ineffective access control. An attacker could exploit this vulnerability by sending an SNMPv3 query to an affected device from a host that is not permitted by the SNMPv3 access control list. A successful exploit could allow the attacker to send an SNMP query to an affected device and retrieve information from the device. The attacker would need valid credentials to perform the SNMP query.

A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to query SNMP data. This vulnerability is due to ineffective access control. An attacker could exploit this vulnerability by sending an SNMPv3 query to an affected device from a host that is not permitted by the SNMPv3 access control list. A successful exploit could allow the attacker to send an SNMP query to an affected device and retrieve information from the device. The attacker would need valid credentials to perform the SNMP query.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

According to its self-reported version, Cisco FTD Software is affected by a vulnerability.

  - A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality     of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software     could allow an unauthenticated, remote attacker to query SNMP data. This vulnerability is due to     ineffective access control. An attacker could exploit this vulnerability by sending an SNMPv3 query to an     affected device from a host that is not permitted by the SNMPv3 access control list. A successful exploit     could allow the attacker to send an SNMP query to an affected device and retrieve information from the     device. The attacker would need valid credentials to perform the SNMP query. (CVE-2021-34794)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

According to its self-reported version, Cisco ASA Software is affected by a vulnerability.

  - A vulnerability in the Simple Network Management Protocol version 3 (SNMPv3) access control functionality     of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software     could allow an unauthenticated, remote attacker to query SNMP data. This vulnerability is due to     ineffective access control. An attacker could exploit this vulnerability by sending an SNMPv3 query to an     affected device from a host that is not permitted by the SNMPv3 access control list. A successful exploit     could allow the attacker to send an SNMP query to an affected device and retrieve information from the     device. The attacker would need valid credentials to perform the SNMP query. (CVE-2021-34794)

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

ID	Name	Product	Family	Type	Severity
506142	Cisco ASA Improper Access Control (CVE-2021-34794)	Tenable OT Security	Tenable.ot	Remote	medium
155025	Cisco Firepower Threat Defense Software SNMP Access Control (cisco-sa-asaftd-snmpaccess-M6yOweq3)	Nessus	CISCO	Local	medium
155024	Cisco Adaptive Security Appliance Software SNMP Access Control (cisco-sa-asaftd-snmpaccess-M6yOweq3)	Nessus	CISCO	Local	medium

Detections

Analytics

CVE-2021-34794

medium

Tenable Plugins

medium

medium

medium