CVE-2021-34744: Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities
Multiple vulnerabilities in Cisco Business 220 Series Smart Switches firmware could allow an attacker with Administrator privileges to access sensitive login credentials or reconfigure the passwords on the user account. For more information about these vulnerabilities, see the Details section of this advisory.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-34744?
CVE-2021-34744 is a vulnerability in the Cisco Business 220 Series Smart Switches firmware that could allow an attacker with Administrator privileges to access sensitive login credentials or reconfigure user account passwords.
What is the severity of CVE-2021-34744?
The severity of CVE-2021-34744 is medium, with a severity value of 4.9.
How can an attacker exploit CVE-2021-34744?
An attacker with Administrator privileges can exploit CVE-2021-34744 to gain access to sensitive login credentials or modify user account passwords.
Which Cisco Business 220 Series Smart Switches firmware versions are affected by CVE-2021-34744?
The Cisco Business 220 Series Smart Switches firmware versions up to and including 1.2.0.6 are affected by CVE-2021-34744.
Where can I find more information about CVE-2021-34744?
You can find more information about CVE-2021-34744 at the following link: [Cisco Security Advisory](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-hardcoded-cred-MJCEXvX)