{ "document": { "acknowledgments": [ { "summary": "These vulnerabilities were publicly disclosed by the OpenSSL Software Foundation on March 25, 2021." } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "notes": [ { "category": "summary", "title": "Summary", "text": "On March 25, 2021, the OpenSSL Project released a security advisory, OpenSSL Security Advisory [25 March 2021], [\"https://www.openssl.org/news/secadv/20210325.txt\"] that disclosed two vulnerabilities.\r\n\r\nExploitation of these vulnerabilities could allow an attacker to use a valid non-certificate authority (CA) certificate to act as a CA and sign a certificate for an arbitrary organization, user or device, or to cause a denial of service (DoS) condition.\r\n\r\n" }, { "category": "general", "title": "Affected Products", "text": "Cisco investigated its product line to determine which products and services may be affected by this vulnerability.\r\n\r\n\r\nThe Vulnerable Products [\"#vp\"] section includes Cisco bug IDs for each product. The bugs will be accessible through the Cisco Bug Search Tool [\"https://bst.cloudapps.cisco.com/bugsearch/bug/BUGID\"] and will contain additional platform-specific information, including workarounds (if available) and fixed software releases.\r\n\r\nAny product or service not listed in the Vulnerable Products [\"#vp\"] section of this advisory is to be considered not vulnerable." }, { "category": "general", "title": "Vulnerable Products", "text": "The following table lists Cisco products that are affected by the vulnerabilities that are described in this advisory. If a future release date is indicated for software, the date provided represents an estimate based on all information known to Cisco as of the Last Updated date at the top of the advisory. Availability dates are subject to change based on a number of factors, including satisfactory testing results and delivery of other priority features and fixes. If no version or date is listed for an affected component (indicated by a blank field and/or an advisory designation of Interim), customers should refer to the associated Cisco bug(s) for further details. After the advisory is marked Final, customers should refer to the associated Cisco bug(s) for further details.\r\n Product Cisco Bug ID Fixed Release Availability [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"] Collaboration and Social Media Cisco Webex Meetings Server CSCvx82619 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82619\"] 4.0MR4 (May 2021) Endpoint Clients and Client Software Cisco Webex Meetings for iOS CSCvx82617 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82617\"] 41.4 (Feb 2021)\r\n11.4 (Feb 2021) Meraki Products Cisco Meraki MS390 — Release TBD (May 2021) Network and Content Security Devices Cisco Firepower 4100 Series CSCvx82705 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82705\"] 2.10.1 (May 2021)\r\n2.9.1 (Jun 2021)\r\n2.11.1 (Oct 2021) Cisco Firepower 9300 Security Appliances CSCvx82705 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82705\"] 2.10.1 (May 2021)\r\n2.9.1 (Jun 2021)\r\n2.11.1 (Oct 2021) Cisco Threat Grid Appliance M5 CSCvx82740 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82740\"] 2.13.0 (Apr 2021) Cisco Web Security Appliance (WSA) CSCvx82614 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82614\"] 14.0 (Jun 2021) Network Management and Provisioning Cisco Business Process Automation CSCvx82587 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82587\"] 3.1 (Jun 2021) Cisco Connected Pharma CSCvx82681 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82681\"] 1.5.7 (May 2021) Cisco Container Platform CSCvx82677 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82677\"] 10.0.0 (Apr 2021) Cisco Evolved Programmable Network Manager CSCvx82652 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82652\"] 5.1 (April 2021) Cisco Kinetic for Cities CSCvx82734 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82734\"] MD 3.5.2.15 (April 2021) Cisco Managed Services Accelerator CSCvx82693 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82693\"] 4.0.0 (Jul 2021) Cisco Policy Suite CSCvx82748 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82748\"] 21.2 (Aug 2021) Cisco Prime Infrastructure CSCvx82664 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82664\"] 3.10 (Sept 2021)\r\n3.9 (May 2021) Cisco Security Manager CSCvx82670 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82670\"] CSM 4.24 (Dec 2021) Cisco Virtualized Infrastructure Manager CSCvx82666 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82666\"] 4.2 (May 2021)\r\n4.2.1 (July 2021) Routing and Switching - Enterprise and Service Provider Cisco 800 Series Industrial Integrated Services Routers (IOx feature) CSCvx88577 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx88577\"] 15.9(3)M4 (Jul 2021) Cisco IOS XR Software CSCvx82673 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82673\"] 7.3.2 (Oct 2021)\r\n7.5.1 (Dec 2021) Cisco IOS and IOS XE Software CSCvx82754 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82754\"] 17.6.1 (Jul 2021)\r\n17.3.4 (Jun 2021)\r\n17.4.3 (Dec 2021) Cisco IOx Fog Director CSCvx82750 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82750\"] 1.14.3 (Apr 2021) Cisco Nexus 3000 Series Switches (NX-OS 10.1) CSCvx82861 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82861\"] 10.1.2 (Apr 2021) Cisco Nexus 9000 Series Switches in standalone NX-OS mode (NX-OS 10.1) CSCvx82861 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82861\"] 10.1.2 (Apr 2021) Cisco c800 Series Integrated Services Routers (IOx feature) CSCvx82752 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82752\"] 15.9(3)M4 (Jul 2021) Routing and Switching - Small Business Cisco 250 Series Smart Switches CSCvx82728 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82728\"] 3.2.x (Mar 2022) Cisco 350 Series Managed (SF350 and SG350) Switches CSCvx82727 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82727\"] 3.2.x (Mar 2022) Cisco 550X Series Stackable (SF550 and SG550) Managed Switches CSCvx82727 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82727\"] 3.2.x (Mar 2022) Cisco Business 250 Series Smart Switches CSCvx82710 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82710\"] 3.2.x (Mar 2022) Cisco Business 350 Series Managed Switches CSCvx82710 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82710\"] 3.2.x (Mar 2022) Cisco Small Business RV Series RV320 Dual Gigabit WAN VPN Router CSCvx82720 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82720\"] None planned Cisco Small Business RV Series RV325 Dual WAN VPN Router CSCvx82721 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82721\"] None planned Cisco Small Business RV130 Series VPN Routers CSCvx82717 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82717\"] None planned Unified Computing Cisco UCS B-Series Blade Servers CSCvx82644 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82644\"] 4.2(1) (May 2021) Cisco UCS Standalone C-Series Rack Server - Integrated Management Controller CSCvx82648 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82648\"] 4.2(1a) (May 2021) Voice and Unified Communications Devices Cisco Computer Telephony Integration Object Server (CTIOS) CSCvx82605 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82605\"] 12.6(1) (May 2021)\r\n12.5(1) (May 2021) Cisco IP Conference Phone 7832 with Multiplatform Firmware CSCvx84316 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84316\"] 11.3.4 (Jun 2021) Cisco IP Conference Phone 7832 CSCvx82765 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82765\"] 14.1.1 (Sept 2021) Cisco IP Conference Phone 8832 with Multiplatform Firmware CSCvx84321 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84321\"] 11.3.4 (Jun 2021) Cisco IP Conference Phone 8832 CSCvx82791 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82791\"] 14.1.1 (Sept 2021) Cisco IP Phone 6800 Series with Multiplatform Firmware CSCvx84326 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84326\"] 11.3.4 (Jun 2021) Cisco IP Phone 7800 Series with Multiplatform Firmware CSCvx84320 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84320\"] 11.3.4 (Jun 2021) Cisco IP Phone 8800 Series with Multiplatform Firmware CSCvx84314 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84314\"] 11.3.4 (Jun 2021) Cisco IP Phone 8800 Series CSCvx84332 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84332\"] 14.1.1 (Sept 2021) Cisco IP Phone 8845 with Multiplatform Firmware CSCvx84315 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84315\"] 11.3.4 (Jun 2021) Cisco IP Phone 8845 CSCvx84323 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84323\"] 14.1.1 (Sept 2021) Cisco IP Phone 8865 with Multiplatform Firmware CSCvx84315 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84315\"] 11.3.4 (Jun 2021) Cisco IP Phone 8865 CSCvx84323 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84323\"] 14.1.1 (Sept 2021) Cisco Unified Contact Center Enterprise CSCvx82605 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82605\"] 12.6(1) (May 2021)\r\n12.5(1) (May 2021) Cisco Unified Intelligent Contact Management Enterprise CSCvx82605 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82605\"] 12.6(1) (May 2021)\r\n12.5(1) (May 2021) Cisco Virtualization Experience Media Edition CSCvx82792 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82792\"] 14.0.1 (May 2021) Cisco Webex Hybrid Data Security Node CSCvx82620 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82620\"] 2021.02.10.4763 (May 2021) Cisco Webex Room Phone CSCvx84328 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84328\"] 1.2(0)SR1 (Aug 2021) Cisco Webex Video Mesh CSCvx82684 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82684\"] 2021.04.22.2nnn (Apr 2021) Cisco Webex Wireless Phone CSCvx84322 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84322\"] 1.3(0) (Jun 2021) Cisco Wireless IP Phone 8821 CSCvx82788 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82788\"] 11.0(6)SR2 (Sept 2021) Video, Streaming, TelePresence, and Transcoding Devices Cisco Meeting Server CSCvx82685 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82685\"] 3.2.1 (May 2021)\r\n3.1.3 (May 2021) Cisco TelePresence MX and SX Series CSCvy03325 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvy03325\"] CE-10.3.2.x (May 2021)\r\nCE-9.15.3.x (May 2021) Cisco Video Surveillance Media Server CSCvx82708 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82708\"] VSM-7.14.3 (May 2021) Cisco Webex Board (all models) CSCvy03325 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvy03325\"] CE-10.3.2.x (May 2021)\r\nCE-9.15.3.x (May 2021) Cisco Webex DX70 and DX80 CSCvy03325 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvy03325\"] CE-10.3.2.x (May 2021)\r\nCE-9.15.3.x (May 2021) Wireless Cisco WAP121 Wireless-N Access Point with Single Point Setup CSCvx82732 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82732\"] None planned Cisco WAP321 Wireless-N Access Point with Single Point Setup CSCvx82732 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82732\"] None planned Cisco WAP371 Wireless-AC/N Access Point with Single Point Setup CSCvx82730 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82730\"] None planned Cisco Cloud Hosted Services Cisco Cloud Network Automation Provisioner CSCvx82591 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82591\"] Cisco Smart Net Total Care - On-Premises CSCvx82599 [\"https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82599\"] 2.1.1 (May 2021)" }, { "category": "general", "title": "Products Confirmed Not Vulnerable", "text": "Only products listed in the Vulnerable Products [\"#vp\"] section of this advisory are known to be affected by these vulnerabilities.\r\n\r\nCisco has confirmed that these vulnerabilities do not affect the following products:\r\n\r\nEndpoint Clients and Client Software\r\n\r\nCisco AnyConnect - Network Access Manager\r\nCisco AnyConnect Secure Mobility Client for Android\r\nCisco AnyConnect Secure Mobility Client for Linux\r\nCisco AnyConnect Secure Mobility Client for Mac OS X\r\nCisco AnyConnect Secure Mobility Client for Windows\r\nCisco AnyConnect Secure Mobility Client for iOS\r\nCisco Jabber Guest\r\nCisco Jabber Software Development Kit\r\nCisco Jabber for Mac\r\nCisco Jabber for Windows\r\nCisco Webex Business Suite\r\nCisco Webex Meetings Client - Hosted\r\n\r\nMeraki Products\r\n\r\nCisco Meraki Go (all models)\r\nCisco Meraki MG (all models)\r\nCisco Meraki MR (all models)\r\nCisco Meraki MS120 Series\r\nCisco Meraki MS125 Series\r\nCisco Meraki MS210 Series\r\nCisco Meraki MS225 Series\r\nCisco Meraki MS250 Series\r\nCisco Meraki MS350 Series\r\nCisco Meraki MS355 Series\r\nCisco Meraki MS410 Series\r\nCisco Meraki MS425 Series\r\nCisco Meraki MS450 Series\r\nCisco Meraki MT (all models)\r\nCisco Meraki MV (all models)\r\nCisco Meraki MX (all models)\r\nCisco Meraki Z-Series (all models)\r\n\r\nNetwork Application, Service, and Acceleration\r\n\r\nCisco Cloud Services Platform 2100\r\nCisco Tetration Analytics\r\nCisco Wide Area Application Services (WAAS)\r\n\r\nNetwork and Content Security Devices\r\n\r\nCisco AMP Virtual Private Cloud Appliance\r\nCisco Adaptive Security Appliance (ASA)\r\nCisco Content Security Management Appliance (SMA)\r\nCisco Email Security Appliance (ESA)\r\nCisco Firepower 1000 Series\r\nCisco Firepower 2100 Series\r\nCisco Firepower Management Center\r\nCisco Identity Services Engine (ISE)\r\nCisco Umbrella Virtual Appliance\r\n\r\nNetwork Management and Provisioning\r\n\r\nCisco ACI Multi-Site Orchestrator\r\nCisco Application Policy Infrastructure Controller (APIC)\r\nCisco Cyber Vision\r\nCisco Data Center Network Manager (DCNM)\r\nCisco FindIT Network Probe\r\nCisco NetFlow Generation Appliance\r\nCisco Network Analysis Module\r\nCisco Network Services Orchestrator (NSO)\r\nCisco Prime Access Registrar\r\nCisco Prime Collaboration Assurance\r\nCisco Prime Collaboration Deployment\r\nCisco Prime Collaboration Provisioning\r\nCisco Prime License Manager\r\nCisco Prime Network Change and Configuration Management\r\nCisco Prime Network Registrar Virtual Appliance\r\nCisco Prime Network Registrar\r\nCisco Prime Optical for Service Providers\r\nCisco Prime Performance Manager\r\nCisco Prime Service Catalog Virtual Appliance\r\nCisco Telemetry Broker\r\nCisco UCS Central Software\r\nCisco WAN Automation Engine (WAE)\r\n\r\nRouting and Switching - Enterprise and Service Provider\r\n\r\nCisco ACI Virtual Edge\r\nCisco ASR 5000 Series Routers\r\nCisco ASR 9000 Series Aggregated Services Router Virtualized Services Module\r\nCisco Application Policy Infrastructure Controller (APIC) - Enterprise Module\r\nCisco DNA Center\r\nCisco MDS 9000 Series Multilayer Switches\r\nCisco Network Assurance Engine\r\nCisco Nexus 1000V Series Switches\r\nCisco Nexus 5500 Platform Switches\r\nCisco Nexus 5600 Platform Switches\r\nCisco Nexus 6000 Series Switches\r\nCisco Nexus 7000 Series Switches\r\nCisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode\r\nCisco SD-WAN vEdge 1000 Series Routers\r\nCisco SD-WAN vEdge 2000 Series Routers\r\nCisco SD-WAN vEdge 5000 Series Routers\r\nCisco SD-WAN vEdge Cloud Router Platform\r\nCisco Stealthwatch Cloud\r\nCisco Stealthwatch Endpoint Concentrator\r\nCisco Stealthwatch Flow Collector NetFlow\r\nCisco Stealthwatch Flow Collector sFlow\r\nCisco Stealthwatch Flow Sensor\r\nCisco Stealthwatch Management Console (SMC)\r\nCisco Stealthwatch UDP Director\r\n\r\nRouting and Switching - Small Business\r\n\r\nCisco 220 Series Smart Plus (SF220 and SG220) Switches\r\nCisco 500 Series Stackable (SF500 and SG500) Managed Switches\r\nCisco FindIT Network Manager\r\nCisco RV132W ADSL2+ Wireless-N VPN Router\r\nCisco RV134W VDSL2 Wireless-AC VPN Router\r\nCisco RV160 VPN Router\r\nCisco RV160W Wireless-AC VPN Router\r\nCisco RV260, RV260P, and RV260W VPN Routers\r\nCisco RV340W Dual WAN Gigabit Wireless-AC VPN Router\r\nCisco Small Business 300 Series (SF300 and SG300)\r\nCisco WAP125 Wireless-AC Dual Band Desktop Access Point with PoE\r\nCisco WAP150 Wireless-AC/N Dual Radio Access Point with PoE\r\nCisco WAP361 Wireless-AC/N Dual Radio Wall Plate Access Point with PoE\r\nCisco WAP571 Wireless-AC/N Premium Dual Radio Access Point with PoE\r\nCisco WAP571E Wireless-AC/N Premium Dual Radio Outdoor Access Point\r\nCisco WRP500 Wireless-AC Broadband Router\r\n\r\nUnified Computing\r\n\r\nCisco Common Services Platform Collector\r\nCisco Enterprise NFV Infrastructure Software (NFVIS)\r\nCisco HyperFlex System\r\nCisco UCS 6200 Series Fabric Interconnects\r\nCisco UCS 6300 Series Fabric Interconnects\r\nCisco UCS 6400 Series Fabric Interconnects\r\nCisco UCS Director\r\nCisco UCS E-Series Servers\r\nCisco UCS Manager\r\n\r\nVoice and Unified Communications Devices\r\n\r\nCisco ATA 191 Analog Telephone Adapter\r\nCisco Agent Desktop for Cisco Unified Contact Center Express\r\nCisco Business Edition 4000\r\nCisco Emergency Responder\r\nCisco Finesse\r\nCisco Hosted Collaboration Mediation Fulfillment\r\nCisco IP DECT 110 Repeater with Multiplatform Firmware\r\nCisco IP DECT 210 Multi-Cell Base-Station\r\nCisco IP DECT 6800 Series\r\nCisco IP DECT 6823 with Multiplatform Firmware\r\nCisco IP DECT Phone RPT-110 Repeater\r\nCisco IP Phone 7800 Series\r\nCisco MediaSense\r\nCisco Paging Server (InformaCast)\r\nCisco Paging Server\r\nCisco SPA51x IP Phones\r\nCisco SPA8800 IP Telephony Gateway\r\nCisco Small Business SPA300 Series IP Phones\r\nCisco Small Business SPA500 Series IP Phones\r\nCisco Unified Attendant Console Advanced\r\nCisco Unified Attendant Console Business Edition\r\nCisco Unified Attendant Console Department Edition\r\nCisco Unified Attendant Console Enterprise Edition\r\nCisco Unified Attendant Console Premium Edition\r\nCisco Unified Attendant Console Standard\r\nCisco Unified Communications Domain Manager\r\nCisco Unified Communications Manager / Cisco Unified Communications Manager Session Management Edition\r\nCisco Unified Communications Manager IM &Presence Service (formerly CUPS)\r\nCisco Unified Contact Center Express\r\nCisco Unified IP Conference Phone 8831\r\nCisco Unified IP Phone 3905\r\nCisco Unified IP Phone 6901\r\nCisco Unified IP Phone 6911\r\nCisco Unified IP Phone 7937\r\nCisco Unified IP Phone 8945\r\nCisco Unified IP Phone 8965\r\nCisco Unified Intelligence Center\r\nCisco Unified SIP Proxy Software\r\nCisco Unity Connection\r\nCisco Unity Express\r\nCisco Virtualized Voice Browser\r\nCisco Webex Share\r\n\r\nVideo, Streaming, TelePresence, and Transcoding Devices\r\n\r\nCisco Expressway Series\r\nCisco Meeting Management\r\nCisco TelePresence Video Communication Server (VCS)\r\nCisco Video Surveillance 8000 Series IP Cameras\r\n\r\nWireless\r\n\r\nCisco ASA 5506W-X with FirePOWER Services\r\nCisco Aironet 1560 Series Access Points\r\nCisco Aironet 1810 Series OfficeExtend Access Points\r\nCisco Aironet 1810w Series Access Points\r\nCisco Aironet 1815 Series Access Points\r\nCisco Aironet 1830 Series Access Points\r\nCisco Aironet 1850 Series Access Points\r\nCisco Aironet 2800 Series Access Points\r\nCisco Aironet 3800 Series Access Points\r\nCisco Aironet 4800 Access Points\r\nCisco Aironet Access Points - Running Cisco IOS Software\r\nCisco Catalyst 9100 Access Points\r\nCisco Wireless LAN Controller\r\n\r\nCisco Cloud Hosted Services\r\n\r\nCisco Business Video Services Automation Software\r\nCisco CX Cloud Agent Software\r\nCisco Cloud Email Security\r\nCisco Cloud Web Security\r\nCisco Registered Envelope Service\r\nCisco Services Provisioning Platform\r\nCisco Unified Communications Manager Cloud\r\nCisco Universal Small Cell CloudBase Factory Recovery Root File System - Releases 2.99.4 and later\r\nCisco Webex Centers - Meeting Center, Training Center, Event Center, Support Center\r\nCisco Webex Meeting Server - Multimedia Platform\r\nCisco Webex Network-Based Recording (NBR) Management" }, { "category": "general", "title": "Details", "text": "OpenSSL Certificate Validation Vulnerability\r\nOpenSSL contains a vulnerability that could allow an attacker to use a valid non-certificate authority (CA) certificate to act as a CA and sign a certificate for an arbitrary organization, user, or device.\r\n\r\nThe vulnerability is due to a bypassed check in the validation logic of X.509 certificate chains, resulting in the affected system accepting as valid certificates signed by a non-CA certificate or certificate chain. An attacker can exploit this vulnerability by using any valid certificate or certificate chain to sign a crafted certificate. A successful exploit could allow the attacker to conduct a main-in-the-middle (MiTM) attack and obtain sensitive information (or misreport information) or impersonate an organization, user, or device. Exploitation of this vulnerability could also allow attackers to access networks or assets that are protected by certificate authentication.\r\n\r\nThis vulnerability has been assigned the following CVE ID:\r\n\r\nCVE-2021-3450\r\n OpenSSL NULL Pointer Dereference Denial of Service Vulnerability\r\nOpenSSL contains a vulnerability that could allow an attacker to cause a denial of service (DoS) condition on a targeted system.\r\n\r\nThe vulnerability exists because the affected software incorrectly handles memory structures, leading to a NULL pointer dereference. An attacker could exploit the vulnerability by submitting crafted Transport Layer Security (TLS) packets to an interface of an affected device. A successful exploit could allow the attacker to cause a crash of the TLS server process which could result in a DoS condition on the targeted device.\r\n\r\nNote: Only servers that are processing incoming TLSv1.2 packets are affected by this vulnerability.\r\n\r\nThis vulnerability has been assigned the following CVE ID:\r\n\r\nCVE-2021-3449" }, { "category": "general", "title": "Workarounds", "text": "Any workarounds will be documented in the product-specific Cisco bugs, which are identified in the Vulnerable Products [\"#vp\"] section of this advisory." }, { "category": "general", "title": "Fixed Software", "text": "For information about fixed software releases [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"], consult the Cisco bugs identified in the Vulnerable Products [\"#vp\"] section of this advisory.\r\n\r\nWhen considering software upgrades [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes\"], customers are advised to regularly consult the advisories for Cisco products, which are available from the Cisco Security Advisories page [\"https://www.cisco.com/go/psirt\"], to determine exposure and a complete upgrade solution.\r\n\r\nIn all cases, customers should ensure that the devices to be upgraded contain sufficient memory and confirm that current hardware and software configurations will continue to be supported properly by the new release. If the information is not clear, customers are advised to contact the Cisco Technical Assistance Center (TAC) or their contracted maintenance providers." }, { "category": "general", "title": "Vulnerability Policy", "text": "To learn about Cisco security vulnerability disclosure policies and publications, see the Security Vulnerability Policy [\"https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html\"]. This document also contains instructions for obtaining fixed software and receiving security vulnerability information from Cisco." }, { "category": "general", "title": "Exploitation and Public Announcements", "text": "On March 25, 2021, the OpenSSL Project released OpenSSL Security Advisory [25 March 2021] [\"https://www.openssl.org/news/secadv/20210325.txt\"] detailing these vulnerabilities.\r\n\r\nThe Cisco Product Security Incident Response Team (PSIRT) is aware that proof-of-concept exploit code is available for the vulnerability that is described in this advisory and identified by CVE-2021-3449. Cisco PSIRT is not aware of any malicious use of this vulnerability (CVE-2021-3449).\r\n\r\nCisco PSIRT is not aware of exploit code for or any malicious use of the vulnerability identified by CVE-2021-3450." }, { "category": "general", "title": "Source", "text": "These vulnerabilities were publicly disclosed by the OpenSSL Software Foundation on March 25, 2021." }, { "category": "legal_disclaimer", "title": "Legal Disclaimer", "text": "THIS DOCUMENT IS PROVIDED ON AN \"AS IS\" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS DOCUMENT AT ANY TIME.\r\n\r\nA standalone copy or paraphrase of the text of this document that omits the distribution URL is an uncontrolled copy and may lack important information or contain factual errors. The information in this document is intended for end users of Cisco products." } ], "publisher": { "category": "vendor", "contact_details": "psirt@cisco.com", "issuing_authority": "Cisco PSIRT", "name": "Cisco", "namespace": "https://wwww.cisco.com" }, "references": [ { "category": "self", "summary": "Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2021", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd" }, { "category": "external", "summary": "Cisco Security Vulnerability Policy", "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html" }, { "category": "external", "summary": "OpenSSL Security Advisory [25 March 2021],", "url": "https://www.openssl.org/news/secadv/20210325.txt" }, { "category": "external", "summary": "Cisco Bug Search Tool", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/BUGID" }, { "category": "external", "summary": "Fixed Release Availability", "url": "https://sec.cloudapps.cisco.com/security/center/resources/security_vulnerability_policy.html#fixes" }, { "category": "external", "summary": "CSCvx82619", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82619" }, { "category": "external", "summary": "CSCvx82617", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82617" }, { "category": "external", "summary": "CSCvx82705", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82705" }, { "category": "external", "summary": "CSCvx82740", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82740" }, { "category": "external", "summary": "CSCvx82614", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82614" }, { "category": "external", "summary": "CSCvx82587", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82587" }, { "category": "external", "summary": "CSCvx82681", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82681" }, { "category": "external", "summary": "CSCvx82677", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82677" }, { "category": "external", "summary": "CSCvx82652", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82652" }, { "category": "external", "summary": "CSCvx82734", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82734" }, { "category": "external", "summary": "CSCvx82693", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82693" }, { "category": "external", "summary": "CSCvx82748", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82748" }, { "category": "external", "summary": "CSCvx82664", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82664" }, { "category": "external", "summary": "CSCvx82670", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82670" }, { "category": "external", "summary": "CSCvx82666", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82666" }, { "category": "external", "summary": "CSCvx88577", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx88577" }, { "category": "external", "summary": "CSCvx82673", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82673" }, { "category": "external", "summary": "CSCvx82754", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82754" }, { "category": "external", "summary": "CSCvx82750", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82750" }, { "category": "external", "summary": "CSCvx82861", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82861" }, { "category": "external", "summary": "CSCvx82752", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82752" }, { "category": "external", "summary": "CSCvx82728", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82728" }, { "category": "external", "summary": "CSCvx82727", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82727" }, { "category": "external", "summary": "CSCvx82710", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82710" }, { "category": "external", "summary": "CSCvx82720", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82720" }, { "category": "external", "summary": "CSCvx82721", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82721" }, { "category": "external", "summary": "CSCvx82717", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82717" }, { "category": "external", "summary": "CSCvx82644", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82644" }, { "category": "external", "summary": "CSCvx82648", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82648" }, { "category": "external", "summary": "CSCvx82605", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82605" }, { "category": "external", "summary": "CSCvx84316", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84316" }, { "category": "external", "summary": "CSCvx82765", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82765" }, { "category": "external", "summary": "CSCvx84321", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84321" }, { "category": "external", "summary": "CSCvx82791", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82791" }, { "category": "external", "summary": "CSCvx84326", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84326" }, { "category": "external", "summary": "CSCvx84320", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84320" }, { "category": "external", "summary": "CSCvx84314", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84314" }, { "category": "external", "summary": "CSCvx84332", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84332" }, { "category": "external", "summary": "CSCvx84315", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84315" }, { "category": "external", "summary": "CSCvx84323", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84323" }, { "category": "external", "summary": "CSCvx82792", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82792" }, { "category": "external", "summary": "CSCvx82620", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82620" }, { "category": "external", "summary": "CSCvx84328", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84328" }, { "category": "external", "summary": "CSCvx82684", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82684" }, { "category": "external", "summary": "CSCvx84322", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx84322" }, { "category": "external", "summary": "CSCvx82788", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82788" }, { "category": "external", "summary": "CSCvx82685", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82685" }, { "category": "external", "summary": "CSCvy03325", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvy03325" }, { "category": "external", "summary": "CSCvx82708", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82708" }, { "category": "external", "summary": "CSCvx82732", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82732" }, { "category": "external", "summary": "CSCvx82730", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82730" }, { "category": "external", "summary": "CSCvx82591", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82591" }, { "category": "external", "summary": "CSCvx82599", "url": "https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvx82599" }, { "category": "external", "summary": "Cisco Security Advisories page", "url": "https://www.cisco.com/go/psirt" } ], "title": "Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2021", "tracking": { "current_release_date": "2021-09-10T17:29:50+00:00", "generator": { "date": "2025-10-13T15:40:58+00:00", "engine": { "name": "TVCE" } }, "id": "cisco-sa-openssl-2021-GHY28dJd", "initial_release_date": "2021-03-25T16:00:00+00:00", "revision_history": [ { "date": "2021-03-25T16:09:54+00:00", "number": "1.0.0", "summary": "Initial public release." }, { "date": "2021-03-26T20:24:24+00:00", "number": "1.1.0", "summary": "Updated the lists of products under investigation." }, { "date": "2021-03-29T20:30:24+00:00", "number": "1.2.0", "summary": "Updated the lists of products under investigation, vulnerable, and not vulnerable." }, { "date": "2021-03-30T20:54:19+00:00", "number": "1.3.0", "summary": "Updated the lists of products under investigation, vulnerable, and not vulnerable. Changed \"missing check\" to \"bypassed check\" in Details. Note that upon further investigation Cisco has confirmed that Cisco Meeting Management is not affected by these vulnerabilities. It was incorrectly listed as vulnerable in a previous version of the advisory." }, { "date": "2021-03-31T20:53:53+00:00", "number": "1.4.0", "summary": "Updated the lists of products under investigation, vulnerable, and not vulnerable." }, { "date": "2021-04-01T20:48:37+00:00", "number": "1.5.0", "summary": "Updated the lists of products under investigation, vulnerable, and not vulnerable. Included information about publicly available code to exploit the vulnerability identified by CVE-2021-3449. Note that upon further investigation Cisco has confirmed that Cisco Identity Services Engine (ISE) is not affected by these vulnerabilities. It was incorrectly listed as vulnerable in a previous version of the advisory." }, { "date": "2021-04-05T20:19:15+00:00", "number": "1.6.0", "summary": "Updated the lists of products under investigation, vulnerable, and not vulnerable. Updated the Revision History for version 1.3." }, { "date": "2021-04-06T12:25:00+00:00", "number": "1.7.0", "summary": "Updated the lists of products under investigation, vulnerable, and not vulnerable." }, { "date": "2021-04-08T20:01:36+00:00", "number": "1.8.0", "summary": "Updated the lists of products under investigation, vulnerable, and not vulnerable." }, { "date": "2021-04-12T20:52:31+00:00", "number": "1.9.0", "summary": "Updated the lists of products under investigation, vulnerable, and not vulnerable. Update fixed release availability information for Cisco Computer Telephony Integration Object Server (CTIOS), Cisco Unified Contact Center Enterprise, and Cisco Unified Intelligent Contact Management Enterprise. Note that upon further investigation Cisco has confirmed that Cisco Webex Share, Cisco DNA Center, Cisco Jabber for Mac, Cisco Jabber for Windows, and Cisco Cyber Vision are not affected by these vulnerabilities." }, { "date": "2021-04-14T19:29:52+00:00", "number": "1.10.0", "summary": "Updated the lists of products under investigation, vulnerable, and not vulnerable. Note that upon further investigation Cisco has confirmed that Cisco Application Policy Infrastructure Controller (APIC) - Enterprise Module is not affected by these vulnerabilities." }, { "date": "2021-04-15T19:58:20+00:00", "number": "1.11.0", "summary": "Updated the lists of products under investigation, vulnerable, and not vulnerable. Updated fixed release availability for Cisco IOS XR Software, Cisco Firepower 4100 Series, Cisco Firepower 9300 Security Appliances." }, { "date": "2021-04-20T18:01:27+00:00", "number": "1.12.0", "summary": "Updated the lists of products under investigation, vulnerable, and not vulnerable. Note that upon further investigation, Cisco has confirmed that Cisco Network Services Orchestrator (NSO) is not affected by these vulnerabilities." }, { "date": "2021-04-21T12:37:08+00:00", "number": "1.13.0", "summary": "Updated the list of vulnerable products. Removed the Cisco Bug ID CSCvx82788 and the CVSS score from the advisory header." }, { "date": "2021-04-22T13:22:21+00:00", "number": "1.14.0", "summary": "Updated the lists of products vulnerable, and not vulnerable. Note that upon further investigation, Cisco has confirmed that Cisco FindIT Network Probe is not affected by these vulnerabilities." }, { "date": "2021-04-27T18:12:42+00:00", "number": "1.15.0", "summary": "Updated the lists of vulnerable products and products confirmed not vulnerable. Upon further investigation, Cisco has confirmed that Cisco SD-WAN vEdge 1000, 2000, and 5000 Series Routers and Cisco SD-WAN vEdge Cloud Router Platform are not affected by these vulnerabilities." }, { "date": "2021-05-07T16:49:34+00:00", "number": "1.16.0", "summary": "Updated the lists of products vulnerable, and not vulnerable. Note that upon further investigation Cisco has confirmed that Cisco Meraki MS390 is affected by the vulnerability identified by the CVE ID CVE-2021-3449. It was incorrectly listed as not vulnerable in a previous version of the advisory." }, { "date": "2021-05-10T14:38:42+00:00", "number": "1.17.0", "summary": "Removed the Cisco bug IDs from the advisory header." }, { "date": "2021-07-06T19:43:55+00:00", "number": "1.18.0", "summary": "Updated the advisory throughout to reflect that the investigation is complete. The fix availability information and the lists of vulnerable and not vulnerable products did not change." }, { "date": "2021-08-30T16:42:56+00:00", "number": "1.19.0", "summary": "Updated Webex Room Phone fixed release." }, { "date": "2021-09-10T17:29:50+00:00", "number": "1.20.0", "summary": "Updated the fixed release availability information for Cisco IOS and IOS XE Software. Removed a duplicate entry for Webex Room Phone." } ], "status": "final", "version": "1.20.0" } }, "product_tree": { "branches": [ { "name": "Cisco", "category": "vendor", "branches": [ { "name": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software", "category": "product_family", "product": { "name": "Cisco Secure Firewall Adaptive Security Appliance (ASA) Software ", "product_id": "CSAFPID-6588" } }, { "name": "Cisco IOS XE Software", "category": "product_family", "product": { "name": "Cisco IOS XE Software ", "product_id": "CSAFPID-93036" } }, { "name": "Cisco Identity Services Engine Software", "category": "product_family", "product": { "name": "Cisco Identity Services Engine Software ", "product_id": "CSAFPID-111903" } }, { "name": "Cisco IoT Field Network Director (IoT-FND)", "category": "product_family", "product": { "name": "Cisco IoT Field Network Director (IoT-FND) ", "product_id": "CSAFPID-227605" } }, { "name": "Cisco Network Services Orchestrator", "category": "product_family", "product": { "name": "Cisco Network Services Orchestrator ", "product_id": "CSAFPID-227765" } }, { "name": "Cisco HyperFlex HX Data Platform", "category": "product_family", "product": { "name": "Cisco HyperFlex HX Data Platform ", "product_id": "CSAFPID-247050" } } ] } ] }, "vulnerabilities": [ { "cve": "CVE-2021-3449", "notes": [ { "category": "other", "title": "Affected Product Comprehensiveness", "text": "Complete." } ], "product_status": { "known_affected": [ "CSAFPID-93036", "CSAFPID-227605", "CSAFPID-6588", "CSAFPID-247050", "CSAFPID-227765", "CSAFPID-111903" ] }, "remediations": [ { "category": "vendor_fix", "details": "Cisco has released software updates that address this vulnerability.", "product_ids": [ "CSAFPID-111903", "CSAFPID-227765", "CSAFPID-247050", "CSAFPID-6588", "CSAFPID-93036", "CSAFPID-227605" ], "url": "https://software.cisco.com" } ], "title": "Multiple Vulnerabilities in OpenSSL (March 2021)" }, { "cve": "CVE-2021-3450", "notes": [ { "category": "other", "title": "Affected Product Comprehensiveness", "text": "Complete." } ], "product_status": { "known_affected": [ "CSAFPID-6588" ] }, "remediations": [ { "category": "vendor_fix", "details": "Cisco has released software updates that address this vulnerability.", "product_ids": [ "CSAFPID-6588" ], "url": "https://software.cisco.com" } ], "scores": [ { "cvss_v3": { "baseScore": 7.4, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "CSAFPID-6588" ] } ], "title": "Multiple Vulnerabilities in OpenSSL (March 2021)" } ] }