A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published: 2021-11-04T15:40:23.357489Z

Updated: 2024-09-17T04:09:52.982Z

Reserved: 2021-06-15T00:00:00

Link: CVE-2021-34739

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-11-04T16:15:08.577

Modified: 2023-11-07T03:36:15.877

Link: CVE-2021-34739

cve-icon Redhat

No data.