CVE-2021-34744 MEDIUM

CVE-2021-34744: Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities

Vendor Cisco
Product Cisco Small Business 220 Series Smart Plus Switches
Weakness CWE-540
Published October 6, 2021
Last update November 7, 2024
View on NVD All CVEs

CVSS base score

4.9/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

Multiple vulnerabilities in Cisco Business 220 Series Smart Switches firmware could allow an attacker with Administrator privileges to access sensitive login credentials or reconfigure the passwords on the user account. For more information about these vulnerabilities, see the Details section of this advisory.

Key dates

02Disclosure timeline

October 6, 2021 CVE published
November 7, 2024 Record updated