Vulnslist

find the latest Cisco vulnerabilities

Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities

cisco-sa-sb-hardcoded-cred-MJCEXvX · Medium · Published · Updated

Multiple vulnerabilities in Cisco Business 220 Series Smart Switches firmware could allow an attacker with Administrator privileges to access sensitive login credentials or reconfigure the passwords on the user account. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-hardcoded-cred-MJCEXvX

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address these vulnerabilities.

CVEsCVE-2021-34744, CVE-2021-34757
Cisco Bug IDsCSCvy90713, CSCvy90709
CVSS ScoreBase 4.9
Base 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:X/RL:X/RC:X
Base 5.5 CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:X/RL:X/RC:X
Product Names From Source
Cisco Small Business 220 Series Smart Plus Switches, Cisco Small Business Smart and Managed Switches

CSAF Product Statuses

Product Status Source CVE Rows
Cisco Small Business 220 Series Smart Plus Switches known_affected cisco_csaf CVE-2021-34744, CVE-2021-34757 2
Cisco Small Business Smart and Managed Switches known_affected cisco_csaf CVE-2021-34744, CVE-2021-34757 2

Related Products

Product CVE Evidence
Cisco Small Business 220 Series Smart Plus Switches CVE-2021-34744 Cisco CSAF
Cisco Small Business Smart and Managed Switches CVE-2021-34744 Cisco CSAF
Cisco Business 220 Series Switches CVE-2021-34744 Cisco OpenVuln
Cisco Small Business 220 Series Smart Switches CVE-2021-34744 Cisco OpenVuln
Cisco Small Business 220 Series Smart Plus Switches CVE-2021-34757 Cisco CSAF
Cisco Small Business Smart and Managed Switches CVE-2021-34757 Cisco CSAF
Cisco Business 220 Series Switches CVE-2021-34757 Cisco OpenVuln
Cisco Small Business 220 Series Smart Switches CVE-2021-34757 Cisco OpenVuln