Vulnerability · Published Oct 6, 2021 · Assigned by cisco
CVE-2021-34744Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities
Medium 4.9
In plain English
A medium-severity security flaw in Cisco Small Business 220 Series Smart Plus Switches from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).
Severity (CVSS 3.1)4.9Medium
Exploit odds (30 days)0.7%top 44.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Multiple vulnerabilities in Cisco Business 220 Series Smart Switches firmware could allow an attacker with Administrator privileges to access sensitive login credentials or reconfigure the passwords on the user account. For more information about these vulnerabilities, see the Details section of this advisory.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Small Business 220 Series Smart Plus Switches | n/a |
Weakness: CWE-540 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
References
- 20211006 Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities vendor-advisory, x_refsource_CISCO