CVE-2021-1422

CVE-2021-1422 is a denial-of-service vulnerability affecting Cisco ASA Software Release 9.16.1 and FTD Software Release 7.0.0. A logic error in the software cryptography module allows an authenticated remote attacker, or an unauthenticated attacker in a man-in-the-middle position, to send malicious packets over an established IPsec connection. This can cause the device to unexpectedly reload, leading to a denial of service. The vulnerability has a CVSS score of 7.7 (High) due to its network attack vector and high impact on availability, though it does not compromise encrypted data. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.