CVE-2021-34757
Medium
Description
Multiple vulnerabilities in Cisco Business 220 Series Smart Switches firmware could allow an attacker with Administrator privileges to access sensitive login credentials or reconfigure the passwords on the user account. For more information about these vulnerabilities, see the Details section of this advisory.
SeverityMedium
CVSS4.9
Exploit probability50. percentile0.6%
Product
Cisco Business 220-8t-e-2g Firmware
PublishedOct 6, 2021
First seenOct 6, 2021
Weakness typeCWE-540CWE-540
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco business_220-8t-e-2g_firmware | v ≤ 1.2.0.6 | — |
| cisco business_220-8p-e-2g_firmware | v ≤ 1.2.0.6 | — |
| cisco business_220-8fp-e-2g_firmware | v ≤ 1.2.0.6 | — |
| cisco business_220-16t-2g_firmware | v ≤ 1.2.0.6 | — |
| cisco business_220-16p-2g_firmware | v ≤ 1.2.0.6 | — |
| cisco business_220-24t-4g_firmware | v ≤ 1.2.0.6 | — |
| cisco business_220-24p-4g_firmware | v ≤ 1.2.0.6 | — |
| cisco business_220-24fp-4g_firmware | v ≤ 1.2.0.6 | — |
| cisco business_220-48t-4g_firmware | v ≤ 1.2.0.6 | — |
| cisco business_220-48p-4g_firmware | v ≤ 1.2.0.6 | — |
| cisco business_220-24t-4x_firmware | v ≤ 1.2.0.6 | — |
| cisco business_220-24p-4x_firmware | v ≤ 1.2.0.6 | — |
| cisco business_220-24fp-4x_firmware | v ≤ 1.2.0.6 | — |
| cisco business_220-48t-4x_firmware | v ≤ 1.2.0.6 | — |
| cisco business_220-48p-4x_firmware | v ≤ 1.2.0.6 | — |
| cisco business_220-48fp-4x_firmware | v ≤ 1.2.0.6 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.