CVE-2021-34744

Multiple vulnerabilities in Cisco Business 220 Series Smart Switches firmware could allow an attacker with Administrator privileges to access sensitive login credentials or reconfigure the passwords on the user account. For more information about these vulnerabilities, see the Details section of this advisory.

Score

CVSS 3.1 4.9 Medium

Status

Modified - psirt@cisco.com

Published

2021-10-06

Last modified

2024-11-07

Weaknesses

CWE-540, CWE-798

Affected products

• Business 220-16p-2g Firmware (Cisco)
• Business 220-16t-2g Firmware (Cisco)
• Business 220-24fp-4g Firmware (Cisco)
• Business 220-24fp-4x Firmware (Cisco)
• Business 220-24p-4g Firmware (Cisco)
• Business 220-24p-4x Firmware (Cisco)
• Business 220-24t-4g Firmware (Cisco)
• Business 220-24t-4x Firmware (Cisco)
• Business 220-48fp-4x Firmware (Cisco)
• Business 220-48p-4g Firmware (Cisco)
• Business 220-48p-4x Firmware (Cisco)
• Business 220-48t-4g Firmware (Cisco)
• Business 220-48t-4x Firmware (Cisco)
• Business 220-8fp-e-2g Firmware (Cisco)
• Business 220-8p-e-2g Firmware (Cisco)
• Business 220-8t-e-2g Firmware (Cisco)
• Cisco Small Business 220 Series Smart Plus Switches (Cisco)

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-hardcoded-cred-MJCEXvX