CVE-2021-34739
Yüksek
Açıklama
Birden fazla Cisco Small Business Series Switches cihazının web tabanlı yönetim arayüzündeki bir güvenlik açığı, kimliği doğrulanmamış uzak bir saldırganın geçerli kullanıcı oturum kimlik bilgilerini yeniden oynatmasına ve etkilenen bir cihazın web tabanlı yönetim arayüzüne yetkisiz erişim sağlamasına izin verebilir. Bu güvenlik açığı, oturum kimlik bilgilerinin yetersiz süresinin dolmasından kaynaklanmaktadır. Bir saldırgan, etkilenen bir cihaza karşı ortadaki adam (man-in-the-middle) saldırısı gerçekleştirerek geçerli oturum kimlik bilgilerini ele geçirip daha sonra bu bilgileri aynı cihaza karşı yeniden oynatarak bu zafiyeti istismar edebilir. Başarılı bir istismar, saldırganın web tabanlı yönetim arayüzüne yönetici ayrıcalıklarıyla erişmesine olanak tanıyabilir.
ÖnemYüksek
CVSS8.1
İstismar olasılığı—
Ürün
Cisco Sf250-24 Firmware
Yayın4 Kas 2021
İlk görülme4 Kas 2021
Zayıflık türüCWE-613CWE-613
Nasıl düzeltilir
Güncelleyin
- cisco sf500-24_firmware2.5.8.12 ya da sonraki bir sürüm
- cisco sf500-24p_firmware2.5.8.12 ya da sonraki bir sürüm
- cisco sf500-24mp_firmware2.5.8.12 ya da sonraki bir sürüm
- cisco sf500-48_firmware2.5.8.12 ya da sonraki bir sürüm
- cisco sf500-48p_firmware2.5.8.12 ya da sonraki bir sürüm
- cisco sf500-48mp_firmware2.5.8.12 ya da sonraki bir sürüm
- cisco sg500-28_firmware2.5.8.12 ya da sonraki bir sürüm
- cisco sg500-28p_firmware2.5.8.12 ya da sonraki bir sürüm
- cisco sg500-28mpp_firmware2.5.8.12 ya da sonraki bir sürüm
- cisco sg500-52_firmware2.5.8.12 ya da sonraki bir sürüm
Etkilenen ürünler
| Ürün | Etkilenen sürümler | Düzeltildiği sürüm |
|---|---|---|
| cisco sf250-24_firmware | v ≤ 2.5 | — |
| cisco sf250-24p_firmware | v ≤ 2.5 | — |
| cisco sf250-48_firmware | v ≤ 2.5 | — |
| cisco sf250-48hp_firmware | v ≤ 2.5 | — |
| cisco sf250-08_firmware | v ≤ 2.5 | — |
| cisco sf250-08hp_firmware | v ≤ 2.5 | — |
| cisco sf250-10p_firmware | v ≤ 2.5 | — |
| cisco sf250-18_firmware | v ≤ 2.5 | — |
| cisco sf250-26_firmware | v ≤ 2.5 | — |
| cisco sf250-26hp_firmware | v ≤ 2.5 | — |
| cisco sf250-26p_firmware | v ≤ 2.5 | — |
| cisco sf250-50_firmware | v ≤ 2.5 | — |
| cisco sf250-50hp_firmware | v ≤ 2.5 | — |
| cisco sf250-50p_firmware | v ≤ 2.5 | — |
| cisco sf250x-24_firmware | v ≤ 2.5 | — |
| cisco sf250x-24p_firmware | v ≤ 2.5 | — |
| cisco sf250x-48_firmware | v ≤ 2.5 | — |
| cisco sf250x-48p_firmware | v ≤ 2.5 | — |
| cisco sf350-08_firmware | v ≤ 2.5 | — |
| cisco sf350-24_firmware | v ≤ 2.5 | — |
| cisco sf350-24mp_firmware | v ≤ 2.5 | — |
| cisco sf350-24p_firmware | v ≤ 2.5 | — |
| cisco sf350-48_firmware | v ≤ 2.5 | — |
| cisco sf350-8mp_firmware | v ≤ 2.5 | — |
| cisco sf350-48p_firmware | v ≤ 2.5 | — |
| cisco sf352-08_firmware | v ≤ 2.5 | — |
| cisco sf352-08mp_firmware | v ≤ 2.5 | — |
| cisco sf352-08p_firmware | v ≤ 2.5 | — |
| cisco sf350-8pd_firmware | v ≤ 2.5 | — |
| cisco sf350-10_firmware | v ≤ 2.5 | — |
| cisco sf350-10mp_firmware | v ≤ 2.5 | — |
| cisco sf350-10p_firmware | v ≤ 2.5 | — |
| cisco sf350-10sfp_firmware | v ≤ 2.5 | — |
| cisco sf350-20_firmware | v ≤ 2.5 | — |
| cisco sf350-28_firmware | v ≤ 2.5 | — |
| cisco sf350-28mp_firmware | v ≤ 2.5 | — |
| cisco sf350-28p_firmware | v ≤ 2.5 | — |
| cisco sf350-28sfp_firmware | v ≤ 2.5 | — |
| cisco sf350-52_firmware | v ≤ 2.5 | — |
| cisco sf350-52mp_firmware | v ≤ 2.5 | — |
| cisco sf350-52p_firmware | v ≤ 2.5 | — |
| cisco sf355-10p_firmware | v ≤ 2.5 | — |
| cisco sg350x-8pmd_firmware | v ≤ 2.5 | — |
| cisco sg350x-12pmv_firmware | v ≤ 2.5 | — |
| cisco sg350x-24_firmware | v ≤ 2.5 | — |
| cisco sg350x-24p_firmware | v ≤ 2.5 | — |
| cisco sg350x-24mp_firmware | v ≤ 2.5 | — |
| cisco sg350x-24pd_firmware | v ≤ 2.5 | — |
| cisco sg350x-24pv_firmware | v ≤ 2.5 | — |
| cisco sg350x-48_firmware | v ≤ 2.5 | — |
| cisco sg350x-48p_firmware | v ≤ 2.5 | — |
| cisco sg350x-48mp_firmware | v ≤ 2.5 | — |
| cisco sg350x-48pv_firmware | v ≤ 2.5 | — |
| cisco sg350xg-2f10_firmware | v ≤ 2.5 | — |
| cisco sg350xg-24f_firmware | v ≤ 2.5 | — |
| cisco sg350xg-24t_firmware | v ≤ 2.5 | — |
| cisco sg350xg-48t_firmware | v ≤ 2.5 | — |
| cisco sx350x-08_firmware | v ≤ 2.5 | — |
| cisco sx350x-12_firmware | v ≤ 2.5 | — |
| cisco sx350x-24f_firmware | v ≤ 2.5 | — |
| cisco sx350x-24_firmware | v ≤ 2.5 | — |
| cisco sx350x-52_firmware | v ≤ 2.5 | — |
| cisco sf550x-24_firmware | v ≤ 2.5 | — |
| cisco sf550x-24p_firmware | v ≤ 2.5 | — |
| cisco sf550x-24mp_firmware | v ≤ 2.5 | — |
| cisco sf550x-48_firmware | v ≤ 2.5 | — |
| cisco sf550x-48p_firmware | v ≤ 2.5 | — |
| cisco sf550x-48mp_firmware | v ≤ 2.5 | — |
| cisco sg550x-24_firmware | v ≤ 2.5 | — |
| cisco sg550x-24p_firmware | v ≤ 2.5 | — |
| cisco sg550x-24mp_firmware | v ≤ 2.5 | — |
| cisco sg550x-24mpp_firmware | v ≤ 2.5 | — |
| cisco sg550x-48_firmware | v ≤ 2.5 | — |
| cisco sg550x-48p_firmware | v ≤ 2.5 | — |
| cisco sg550x-48mp_firmware | v ≤ 2.5 | — |
| cisco sg550xg-8f8t_firmware | v ≤ 2.5 | — |
| cisco sg550xg-24f_firmware | v ≤ 2.5 | — |
| cisco sg550xg-24t_firmware | v ≤ 2.5 | — |
| cisco sg550xg-48t_firmware | v ≤ 2.5 | — |
| cisco sx550x-12f_firmware | v ≤ 2.5 | — |
| cisco sx550x-16ft_firmware | v ≤ 2.5 | — |
| cisco sx550x-24ft_firmware | v ≤ 2.5 | — |
| cisco sx550x-24f_firmware | v ≤ 2.5 | — |
| cisco sx550x-24_firmware | v ≤ 2.5 | — |
| cisco sx550x-52_firmware | v ≤ 2.5 | — |
| cisco cbs250-8t-d_firmware | v ≤ 3.1 | — |
| cisco cbs250-8pp-d_firmware | v ≤ 3.1 | — |
| cisco cbs250-8t-e-2g_firmware | v ≤ 3.1 | — |
| cisco cbs250-8pp-e-2g_firmware | v ≤ 3.1 | — |
| cisco cbs250-8p-e-2g_firmware | v ≤ 3.1 | — |
| cisco cbs250-8fp-e-2g_firmware | v ≤ 3.1 | — |
| cisco cbs250-16t-2g_firmware | v ≤ 3.1 | — |
| cisco cbs250-16p-2g_firmware | v ≤ 3.1 | — |
| cisco cbs250-24t-4g_firmware | v ≤ 3.1 | — |
| cisco cbs250-24pp-4g_firmware | v ≤ 3.1 | — |
| cisco cbs250-24p-4g_firmware | v ≤ 3.1 | — |
| cisco cbs250-24fp-4g_firmware | v ≤ 3.1 | — |
| cisco cbs250-48t-4g_firmware | v ≤ 3.1 | — |
| cisco cbs250-48pp-4g_firmware | v ≤ 3.1 | — |
| cisco cbs250-48p-4g_firmware | v ≤ 3.1 | — |
| cisco cbs250-24t-4x_firmware | v ≤ 3.1 | — |
| cisco cbs250-24p-4x_firmware | v ≤ 3.1 | — |
| cisco cbs250-24fp-4x_firmware | v ≤ 3.1 | — |
| cisco cbs250-48t-4x_firmware | v ≤ 3.1 | — |
| cisco cbs250-48p-4x_firmware | v ≤ 3.1 | — |
| cisco cbs350-8t-e-2g_firmware | v ≤ 3.1 | — |
| cisco cbs350-8p-2g_firmware | v ≤ 3.1 | — |
| cisco cbs350-8p-e-2g_firmware | v ≤ 3.1 | — |
| cisco cbs350-8fp-2g_firmware | v ≤ 3.1 | — |
| cisco cbs350-8fp-e-2g_firmware | v ≤ 3.1 | — |
| cisco cbs350-8s-e-2g_firmware | v ≤ 3.1 | — |
| cisco cbs350-16t-2g_firmware | v ≤ 3.1 | — |
| cisco cbs350-16t-e-2g_firmware | v ≤ 3.1 | — |
| cisco cbs350-16p-2g_firmware | v ≤ 3.1 | — |
| cisco cbs350-16p-e-2g_firmware | v ≤ 3.1 | — |
| cisco cbs350-16fp-2g_firmware | v ≤ 3.1 | — |
| cisco cbs350-24t-4g_firmware | v ≤ 3.1 | — |
| cisco cbs350-24p-4g_firmware | v ≤ 3.1 | — |
| cisco cbs350-24fp-4g_firmware | v ≤ 3.1 | — |
| cisco cbs350-24s-4g_firmware | v ≤ 3.1 | — |
| cisco cbs350-48t-4g_firmware | v ≤ 3.1 | — |
| cisco cbs350-48p-4g_firmware | v ≤ 3.1 | — |
| cisco cbs350-48fp-4g_firmware | v ≤ 3.1 | — |
| cisco cbs350-24t-4x_firmware | v ≤ 3.1 | — |
| cisco cbs350-24p-4x_firmware | v ≤ 3.1 | — |
| cisco cbs350-24fp-4x_firmware | v ≤ 3.1 | — |
| cisco cbs350-48t-4x_firmware | v ≤ 3.1 | — |
| cisco cbs350-48p-4x_firmware | v ≤ 3.1 | — |
| cisco cbs350-48fp-4x_firmware | v ≤ 3.1 | — |
| cisco cbs350-8mgp-2x_firmware | v ≤ 3.1 | — |
| cisco cbs350-8mp-2x_firmware | v ≤ 3.1 | — |
| cisco cbs350-24mgp-4x_firmware | v ≤ 3.1 | — |
| cisco cbs350-12np-4x_firmware | v ≤ 3.1 | — |
| cisco cbs350-24ngp-4x_firmware | v ≤ 3.1 | — |
| cisco cbs350-48ngp-4x_firmware | v ≤ 3.1 | — |
| cisco cbs350-8xt_firmware | v ≤ 3.1 | — |
| cisco cbs350-12xs_firmware | v ≤ 3.1 | — |
| cisco cbs350-12xt_firmware | v ≤ 3.1 | — |
| cisco cbs350-16xts_firmware | v ≤ 3.1 | — |
| cisco cbs350-24xs_firmware | v ≤ 3.1 | — |
| cisco cbs350-24xt_firmware | v ≤ 3.1 | — |
| cisco cbs350-24xts_firmware | v ≤ 3.1 | — |
| cisco cbs350-48xt-4x_firmware | v ≤ 3.1 | — |
| cisco esw2-350g-52_firmware | v ≤ 2.5 | — |
| cisco esw2-350g-52dc_firmware | v ≤ 2.5 | — |
| cisco esw2-550x-48_firmware | v ≤ 2.5 | — |
| cisco esw2-550x-48dc_firmware | v ≤ 2.5 | — |
| cisco sf200-24_firmware | Aralık belirtilmemiş | — |
| cisco sf200-24p_firmware | Aralık belirtilmemiş | — |
| cisco sf200-24fp_firmware | Aralık belirtilmemiş | — |
| cisco sf200-48_firmware | Aralık belirtilmemiş | — |
| cisco sf200-48p_firmware | Aralık belirtilmemiş | — |
| cisco sg200-08_firmware | Aralık belirtilmemiş | — |
| cisco sg200-08p_firmware | Aralık belirtilmemiş | — |
| cisco sg200-10fp_firmware | Aralık belirtilmemiş | — |
| cisco sg200-18_firmware | Aralık belirtilmemiş | — |
| cisco sg200-26_firmware | Aralık belirtilmemiş | — |
| cisco sg200-26p_firmware | Aralık belirtilmemiş | — |
| cisco sg200-26fp_firmware | Aralık belirtilmemiş | — |
| cisco sg200-50_firmware | Aralık belirtilmemiş | — |
| cisco sg200-50p_firmware | Aralık belirtilmemiş | — |
| cisco sg200-50fp_firmware | Aralık belirtilmemiş | — |
| cisco sf300-08_firmware | 1.4.11.02 | — |
| cisco sf302-08_firmware | 1.4.11.02 | — |
| cisco sf302-08p_firmware | 1.4.11.02 | — |
| cisco sf302-08pp_firmware | 1.4.11.02 | — |
| cisco sf302-08mp_firmware | 1.4.11.02 | — |
| cisco sf302-08mpp_firmware | 1.4.11.02 | — |
| cisco sf300-24_firmware | 1.4.11.02 | — |
| cisco sf300-24p_firmware | 1.4.11.02 | — |
| cisco sf300-24pp_firmware | 1.4.11.02 | — |
| cisco sf300-24mp_firmware | 1.4.11.02 | — |
| cisco sf300-48_firmware | 1.4.11.02 | — |
| cisco sf300-48p_firmware | 1.4.11.02 | — |
| cisco sf300-48pp_firmware | 1.4.11.02 | — |
| cisco sg300-10_firmware | 1.4.11.02 | — |
| cisco sg300-10sfp_firmware | 1.4.11.02 | — |
| cisco sg300-10p_firmware | 1.4.11.02 | — |
| cisco sg300-10pp_firmware | 1.4.11.02 | — |
| cisco sg300-10mp_firmware | 1.4.11.02 | — |
| cisco sg300-10mpp_firmware | 1.4.11.02 | — |
| cisco sg300-20_firmware | 1.4.11.02 | — |
| cisco sg300-28_firmware | 1.4.11.02 | — |
| cisco sg300-28p_firmware | 1.4.11.02 | — |
| cisco sg300-28pp_firmware | 1.4.11.02 | — |
| cisco sg300-28mp_firmware | 1.4.11.02 | — |
| cisco sg300-52_firmware | 1.4.11.02 | — |
| cisco sg300-52p_firmware | 1.4.11.02 | — |
| cisco sg300-52mp_firmware | 1.4.11.02 | — |
| cisco sg300-28sfp_firmware | 1.4.11.02 | — |
| cisco sf500-24_firmware | 2.5.5.0 ≤ v < 2.5.8.12 | 2.5.8.12 |
| cisco sf500-24p_firmware | 2.5.5.0 ≤ v < 2.5.8.12 | 2.5.8.12 |
| cisco sf500-24mp_firmware | 2.5.5.0 ≤ v < 2.5.8.12 | 2.5.8.12 |
| cisco sf500-48_firmware | 2.5.5.0 ≤ v < 2.5.8.12 | 2.5.8.12 |
| cisco sf500-48p_firmware | 2.5.5.0 ≤ v < 2.5.8.12 | 2.5.8.12 |
| cisco sf500-48mp_firmware | 2.5.5.0 ≤ v < 2.5.8.12 | 2.5.8.12 |
| cisco sg500-28_firmware | 2.5.5.0 ≤ v < 2.5.8.12 | 2.5.8.12 |
| cisco sg500-28p_firmware | 2.5.5.0 ≤ v < 2.5.8.12 | 2.5.8.12 |
| cisco sg500-28mpp_firmware | 2.5.5.0 ≤ v < 2.5.8.12 | 2.5.8.12 |
| cisco sg500-52_firmware | 2.5.5.0 ≤ v < 2.5.8.12 | 2.5.8.12 |
Sürümünüzü kontrol edin
Ürünü seçin ve kullandığınız sürümü yazın; sürümün etkilenen aralıkta olup olmadığını görün.
Intelligence 360 paketinde
Attack Surface Management
Alan adlarınıza bağlı varlıkları, bu varlıklarda çalışan teknolojileri ve bilinen zafiyetleri tek listede görün.