CVE:CVE-2021-1223
CNNVD:CNNVD-202101-1060
Cisco Firepower Threat Defense（FTD）等都是美国思科（Cisco）公司的产品。Cisco Firepower Threat Defense是一套提供下一代防火墙服务的统一软件。Cisco 3000 Series Industrial Security Appliances是3000系列工业防火墙。Cisco Cloud Services Router 1000V Series是一款1000v系列云服务路由软件。
多款Cisco产品存在安全漏洞，该漏洞源于程序允许未经身份验证的远程攻击者绕过已配置的HTTP文件策略，攻击者可利用该漏洞绕过针对HTTP数据包的配置文件策略，并传递恶意有效负载。
solution:Upgrade cisco firepower_management_center to a higher version than 2.9.14.0,2.9.15,2.9.16,and avoid the version 2.9.14.0,2.9.15,2.9.16; Upgrade cisco firepower_threat_defense to a higher version than 6.7.0,and avoid the version (,6.7.0); Upgrade cisco ios_xe to a higher version than 17.4.1,and avoid the version (,17.4.1); Upgrade snort snort to a higher version than 2.9.17,and avoid the version (,2.9.17)