CVE-2021-34736: Cisco Integrated Management Controller GUI Denial of Service Vulnerability
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to cause the web-based management interface to unexpectedly restart. The vulnerability is due to insufficient input validation on the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to cause the interface to restart, resulting in a denial of service (DoS) condition.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Cisco IMC Software vulnerability?
The vulnerability ID for this Cisco IMC Software vulnerability is CVE-2021-34736.
What is the severity level of CVE-2021-34736?
The severity level of CVE-2021-34736 is high with a score of 7.5.
What is the affected software for CVE-2021-34736?
The affected software for CVE-2021-34736 is Cisco Unified Computing System with versions up to 4.1(2g) and 4.1(3e), and Cisco UCS C420 M3 with no vulnerabilities.
How can an unauthenticated, remote attacker exploit this vulnerability?
An unauthenticated, remote attacker can exploit this vulnerability by causing the web-based management interface of Cisco IMC Software to unexpectedly restart.
How can I fix this vulnerability in Cisco IMC Software?
To fix this vulnerability in Cisco IMC Software, it is recommended to upgrade to a version that is not affected by the vulnerability.