CVE-2021-34739

A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges.

• cisco sf250-24 firmware (<= 2.5) • cisco sf250-24p firmware (<= 2.5) • cisco sf250-48 firmware (<= 2.5) • cisco sf250-48hp firmware (<= 2.5) • cisco sf250-08 firmware (<= 2.5) • cisco sf250-08hp firmware (<= 2.5) • cisco sf250-10p firmware (<= 2.5) • cisco sf250-18 firmware (<= 2.5) • cisco sf250-26 firmware (<= 2.5) • cisco sf250-26hp firmware (<= 2.5) • cisco sf250-26p firmware (<= 2.5) • cisco sf250-50 firmware (<= 2.5) • cisco sf250-50hp firmware (<= 2.5) • cisco sf250-50p firmware (<= 2.5) • cisco sf250x-24 firmware (<= 2.5) • cisco sf250x-24p firmware (<= 2.5) • cisco sf250x-48 firmware (<= 2.5) • cisco sf250x-48p firmware (<= 2.5) • cisco sf350-08 firmware (<= 2.5) • cisco sf350-24 firmware (<= 2.5) • cisco sf350-24mp firmware (<= 2.5) • cisco sf350-24p firmware (<= 2.5) • cisco sf350-48 firmware (<= 2.5) • cisco sf350-8mp firmware (<= 2.5) • cisco sf350-48p firmware (<= 2.5) • cisco sf352-08 firmware (<= 2.5) • cisco sf352-08mp firmware (<= 2.5) • cisco sf352-08p firmware (<= 2.5) • cisco sf350-8pd firmware (<= 2.5) • cisco sf350-10 firmware (<= 2.5) • cisco sf350-10mp firmware (<= 2.5) • cisco sf350-10p firmware (<= 2.5) • cisco sf350-10sfp firmware (<= 2.5) • cisco sf350-20 firmware (<= 2.5) • cisco sf350-28 firmware (<= 2.5) • cisco sf350-28mp firmware (<= 2.5) • cisco sf350-28p firmware (<= 2.5) • cisco sf350-28sfp firmware (<= 2.5) • cisco sf350-52 firmware (<= 2.5) • cisco sf350-52mp firmware (<= 2.5) • cisco sf350-52p firmware (<= 2.5) • cisco sf355-10p firmware (<= 2.5) • cisco sg350x-8pmd firmware (<= 2.5) • cisco sg350x-12pmv firmware (<= 2.5) • cisco sg350x-24 firmware (<= 2.5) • cisco sg350x-24p firmware (<= 2.5) • cisco sg350x-24mp firmware (<= 2.5) • cisco sg350x-24pd firmware (<= 2.5) • cisco sg350x-24pv firmware (<= 2.5) • cisco sg350x-48 firmware (<= 2.5) • cisco sg350x-48p firmware (<= 2.5) • cisco sg350x-48mp firmware (<= 2.5) • cisco sg350x-48pv firmware (<= 2.5) • cisco sg350xg-2f10 firmware (<= 2.5) • cisco sg350xg-24f firmware (<= 2.5) • cisco sg350xg-24t firmware (<= 2.5) • cisco sg350xg-48t firmware (<= 2.5) • cisco sx350x-08 firmware (<= 2.5) • cisco sx350x-12 firmware (<= 2.5) • cisco sx350x-24f firmware (<= 2.5) … and 149 more