CVE:CVE-2021-34791
CNNVD:CNNVD-202110-1920
Cisco Firepower Threat Defense（FTD）和Cisco Adaptive Security Appliances Software（ASA Software）都是美国思科（Cisco）公司的产品。Cisco Firepower Threat Defense是一套提供下一代防火墙服务的统一软件。Cisco Adaptive Security Appliances Software是一套防火墙和网络安全平台。该平台提供了对数据和网络资源的高度安全的访问等功能。
Cisco Firepower Threat Defense（FTD）和Cisco Adaptive Security Appliances Software（ASA Software）存在安全漏洞，攻击者可利用该漏洞绕过ALG和开放未授权的连接与主机坐落在ALG后面。
solution:Upgrade cisco adaptive_security_appliance to a higher version than 9.8.4.40,and avoid the version (,9.8.4.40); Upgrade cisco firepower_threat_defense to a higher version than 6.4.0.12,6.6.5,6.7.0.2,and avoid the version (,6.4.0.12),[6.5.0,6.6.5),[6.7.0,6.7.0.2); Upgrade cisco adaptive_security_appliance_software to a higher version than 9.12.4.18,9.14.2.15,9.15.1.15,and avoid the version [9.12.0,9.12.4.18),[9.13.0,9.14.2.15),[9.15.0,9.15.1.15); Upgrade cisco asa_5512-x_firmware to a higher version than 009.008,009.015,and avoid the version 009.008,009.015; Upgrade cisco asa_5505_firmware to a higher version than 009.008,009.015,and avoid the version 009.008,009.015; Upgrade cisco asa_5515-x_firmware to a higher version than 009.008,009.015,and avoid the version 009.008,009.015; Upgrade cisco asa_5525-x_firmware to a higher version than 009.008,009.015,and avoid the version 009.008,009.015; Upgrade cisco asa_5545-x_firmware to a higher version than 009.008,009.015,and avoid the version 009.008,009.015; Upgrade cisco asa_5555-x_firmware to a higher version than 009.008,009.015,and avoid the version 009.008,009.015; Upgrade cisco asa_5580_firmware to a higher version than 009.008,009.015,and avoid the version 009.008,009.015; Upgrade cisco asa_5585-x_firmware to a higher version than 009.008,009.015,and avoid the version 009.008,009.015