发布日期：2021-01-13
更新日期：2021-01-20

受影响系统：

Cisco Firepower Threat Defense Software
Cisco 3000 Series Industrial Security Appliances (ISAs)
Cisco 1000 Series Integrated Services Routers
Cisco Cloud Services Router 1000V Series
Cisco 4000 Series Integrated Services Routers
Cisco Integrated Services Virtual Routers

描述：

---

CVE(CAN) ID: CVE-2021-1223

Cisco 3000 Series Industrial Security Appliances是3000系列工业防火墙。Cisco 4000 Series Integrated Services Routers（ISRS）是4000系列企业级多业务路由器。Cisco Cloud Services Router 1000V Series是一款1000v系列云服务路由软件。
Cisco多款产品的Snort检测引擎存在文件策略绕过漏洞。该漏洞源于程序未对HTTP范围标头进行正确处理。未经身份认证的远程攻击者可通过向受影响设备发送特制的HTTP数据包利用该漏洞绕过HTTP数据包的已配置文件策略。

<*来源：Ilkin Gasimov （Cisco）
  
  链接：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-filepolbypass-6
*>

建议：

---

厂商补丁：

Cisco
-----
Cisco已经为此发布了一个安全公告（cisco-sa-snort-filepolbypass-67DEwMe2）以及相应补丁:
cisco-sa-snort-filepolbypass-67DEwMe2：Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability
链接：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-filepolbypass-67DEwMe2

浏览次数：1187
严重程度：0（网友投票）