Severity
Medium
Analysis Summary
CVE-2021-34749
Multiple Cisco Products could allow a remote attacker to bypass security restrictions, caused by inadequate filtering of the SSL handshake. By using data from the SSL client hello packet to communicate with an external server, an attacker could exploit this vulnerability to bypass filtering technology on an affected device and exfiltrate data from a compromised host.
Impact
- Bypass Security
- Unauthorized Access
Affected Vendors
Cisco
Affected Products
- Cisco Integrated Services Virtual Router (ISRv)
- Cisco 4000 Series ISRs
- Cisco Cloud Services Router 1000V Series
- Cisco Meraki Security Appliance
Remediation
Refer to Cisco Security Advisory for the patch, upgrade, By, or suggested workaround information.