A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges.
History

Thu, 07 Nov 2024 22:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2021-11-04T15:40:23.357489Z

Updated: 2024-11-07T21:43:18.199Z

Reserved: 2021-06-15T00:00:00

Link: CVE-2021-34739

cve-icon Vulnrichment

Updated: 2024-08-04T00:19:48.160Z

cve-icon NVD

Status : Modified

Published: 2021-11-04T16:15:08.577

Modified: 2024-11-21T06:11:05.400

Link: CVE-2021-34739

cve-icon Redhat

No data.