CVE-2021-40117
A vulnerability in SSL/TLS message handler for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because incoming SSL/TLS packets are not properly processed. An attacker could exploit this vulnerability by sending a crafted SSL/TLS packet to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
Published:Oct 27, 2021
Last Modified:Aug 11, 2026
EPS:Oct 27, 2021
EPSS Score:0.01482
CVSS Score:8.6
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
Adaptive Security Appliance
Cisco
Adaptive Security Appliance
Vendor
Cisco
Product
Adaptive Security Appliance Software
Cisco
Adaptive Security Appliance Software
Vendor
Cisco
Product
Asa 5505
Cisco
Asa 5505
Vendor
Cisco
Product
Asa 5505 Firmware
Cisco
Asa 5505 Firmware
Vendor
Cisco
Product
Asa 5512-x
Cisco
Asa 5512-x
Vendor
Cisco
Product
Asa 5512-x Firmware
Cisco
Asa 5512-x Firmware
Vendor
Cisco
Product
Asa 5515-x
Cisco
Asa 5515-x
Vendor
Cisco
Product
Asa 5515-x Firmware
Cisco
Asa 5515-x Firmware
Vendor
Cisco
Product
Asa 5525-x
Cisco
Asa 5525-x
Vendor
Cisco
Product
Asa 5525-x Firmware
Cisco
Asa 5525-x Firmware
Vendor
Cisco
Product
Asa 5545-x
Cisco
Asa 5545-x
Vendor
Cisco
Product
Asa 5545-x Firmware
Cisco
Asa 5545-x Firmware
Vendor
Cisco
Product
Asa 5555-x
Cisco
Asa 5555-x
Vendor
Cisco
Product
Asa 5555-x Firmware
Cisco
Asa 5555-x Firmware
Vendor
Cisco
Product
Asa 5580
Cisco
Asa 5580
Vendor
Cisco
Product
Asa 5580 Firmware
Cisco
Asa 5580 Firmware
Vendor
Cisco
Product
Asa 5585-x
Cisco
Asa 5585-x
Vendor
Cisco
Product
Asa 5585-x Firmware
Cisco
Asa 5585-x Firmware
Vendor
Cisco
Product
Secure Firewall Threat Defense
Cisco
Secure Firewall Threat Defense
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
