CVE-2021-34744CWE-540

Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities

Medium · published October 6, 2021

CVSS v3.1
4.9
EPSS
1%
Percentile
54.4
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in Cisco Business 220 Series Smart Switches firmware could allow an attacker with Administrator privileges to access sensitive login credentials or reconfigure the passwords on the user account. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00749 · 54.4th percentile
Weakness
CWE-540 · Inclusion of Sensitive Information in Source Code
Published
2021-10-06T19:46Z
EPSS history
Timeline
  • 06 OCT 19:46Z
    Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities
    cvelistv5