CVE-2021-34736CWE-20

Cisco Integrated Management Controller GUI Denial of Service Vulnerability

Medium · published October 21, 2021

CVSS v3.1
5.3
EPSS
1%
Percentile
69.7
In the wild
Unconfirmed
What it is

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to cause the web-based management interface to unexpectedly restart. The vulnerability is due to insufficient input validation on the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to cause the interface to restart, resulting in a denial of service (DoS) condition.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01274 · 69.7th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-10-21T02:50Z
EPSS history
Timeline
  • 21 OCT 02:50Z
    Cisco Integrated Management Controller GUI Denial of Service Vulnerability
    cvelistv5