发布日期：2021-01-13
更新日期：2021-01-20

受影响系统：

Cisco Firepower Threat Defense Software
Cisco 3000 Series Industrial Security Appliances (ISAs)
Cisco 1000 Series Integrated Services Routers
Cisco Cloud Services Router 1000V Series
Cisco 4000 Series Integrated Services Routers
Cisco Integrated Services Virtual Routers

描述：

---

CVE(CAN) ID: CVE-2021-1236

Cisco 3000 Series Industrial Security Appliances是3000系列工业防火墙。Cisco 4000 Series Integrated Services Routers（ISRS）是4000系列企业级多业务路由器。Cisco Cloud Services Router 1000V Series是一款1000v系列云服务路由软件。
Cisco多款产品的Snort应用程序检测引擎存在文件策略绕过漏洞。该漏洞源于检测算法错误。未经身份认证的远程攻击者可通过向受影响设备发送特制数据包利用该漏洞绕过HTTP数据包的已配置文件策略。

<*来源：Cisco
  
  链接：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-app-bypass-cSBY
*>

建议：

---

厂商补丁：

Cisco
-----
Cisco已经为此发布了一个安全公告（cisco-sa-snort-app-bypass-cSBYCATq）以及相应补丁:
cisco-sa-snort-app-bypass-cSBYCATq：Multiple Cisco Products Snort Application Detection Engine Policy Bypass Vulnerability
链接：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-app-bypass-cSBYCATq

浏览次数：1193
严重程度：0（网友投票）