Sf200 24 Firmware
CVE-2021-40127
MEDIUM
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Lifecycle Timeline
1DescriptionNVD
A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an unauthenticated, remote attacker to render the web-based management interface unusable, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to cause a permanent invalid redirect for requests sent to the web-based management interface of the device, resulting in a DoS condition.
AnalysisAI
A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-20. A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an unauthenticated, remote attacker to render the web-based management interface unusable, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to cause a permanent invalid redirect for requests sent to the web-based management interface of the device, resulting in a DoS condition. Affected products include: Cisco Sf200-24 Firmware, Cisco Sf200-24Fp Firmware, Cisco Sf200-24P Firmware, Cisco Sf200-48 Firmware, Cisco Sf200-48P Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Sf200 24 Firmware
View allA vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an
A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an u
A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches cou
Same weakness CWE-20 – Improper Input Validation
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today