CVE-2021-1350CWE-770

Cisco Umbrella Dashboard Packet Flood Vulnerability

Medium · published January 20, 2021

CVSS v3.1
5.3
EPSS
1%
Percentile
70.2
In the wild
Unconfirmed
What it is

A vulnerability in the web UI of Cisco Umbrella could allow an unauthenticated, remote attacker to negatively affect the performance of this service. The vulnerability exists due to insufficient rate limiting controls in the web UI. An attacker could exploit this vulnerability by sending crafted HTTPS packets at a high and sustained rate. A successful exploit could allow the attacker to negatively affect the performance of the web UI. Cisco has addressed this vulnerability.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01297 · 70.2th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2021-01-20T20:00Z
EPSS history
Timeline
  • 20 JAN 20:00Z
    Cisco Umbrella Dashboard Packet Flood Vulnerability
    cvelistv5