CVE-2021-34775: Cisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities
First published: Wed Oct 06 2021(Updated: )
Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database corruption on the affected device For more information about these vulnerabilities, see the Details section of this advisory. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). Cisco has released firmware updates that address these vulnerabilities.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Business 220-8t-e-2g | <=1.2.0.6 | |
| Cisco Business 220-8t-e-2g Firmware | ||
| Cisco Business 220-8p-e-2g | <=1.2.0.6 | |
| Cisco Business 220-8p-e-2g Firmware | ||
| Cisco Business 220-8fp-e-2g Firmware | <=1.2.0.6 | |
| Cisco Business 220-8fp-e-2g Firmware | ||
| Cisco Business 220-16T-2G Firmware | <=1.2.0.6 | |
| Cisco Business 220-16t-2g Firmware | ||
| Cisco Business 220-16p-2g Firmware | <=1.2.0.6 | |
| Cisco Business 220-16p-2g Firmware | ||
| Cisco Business 220-24t-4g Firmware | <=1.2.0.6 | |
| Cisco Business 220-24t-4g Firmware | ||
| Cisco Business 220-24p-4g Firmware | <=1.2.0.6 | |
| Cisco Business 220-24p-4g Firmware | ||
| Cisco Business 220-24fp-4g Firmware | <=1.2.0.6 | |
| Cisco Business 220-24t-4g Firmware | ||
| Cisco Business 220-48T-4G Firmware | <=1.2.0.6 | |
| Cisco Business 220-48t-4g Firmware | ||
| Cisco Business 220 Series Firmware | <=1.2.0.6 | |
| Cisco Business 220-48p-4g | ||
| Cisco Business 220-24t-4x | <=1.2.0.6 | |
| Cisco Business 220-24t-4x Firmware | ||
| Cisco Business 220-24p-4x | <=1.2.0.6 | |
| Cisco Business 220-24p-4x Firmware | ||
| Cisco Business 220-24fp-4x Firmware | <=1.2.0.6 | |
| Cisco Business 220-24fp-4x Firmware | ||
| Cisco Business 220 Series Firmware | <=1.2.0.6 | |
| Cisco Business 220-48t-4x Firmware | ||
| Cisco Business 220-48p-4x Firmware | <=1.2.0.6 | |
| Cisco Business 220-48p-4x Firmware | ||
| Cisco Business 220-48fp-4x Firmware | <=1.2.0.6 | |
| Cisco Business 220-48fp-4x Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this Cisco Small Business switch vulnerability?
The vulnerability ID of this Cisco Small Business switch vulnerability is CVE-2021-34775.
What is the severity level of CVE-2021-34775?
CVE-2021-34775 has a severity level of medium.
What is the affected software for CVE-2021-34775?
The affected software for CVE-2021-34775 is Cisco Small Business 220 Series Smart Switches with firmware version up to and including 1.2.0.6.
What are the potential impacts of CVE-2021-34775?
CVE-2021-34775 can allow an unauthenticated, adjacent attacker to execute code on the affected device or cause it to reload unexpectedly, as well as manipulate the LLDP database.
Where can I find more information about CVE-2021-34775?
You can find more information about CVE-2021-34775 in the Cisco Security Advisory at the following link: [https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb220-lldp-multivuls-mVRUtQ8T](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb220-lldp-multivuls-mVRUtQ8T)
- agent/type
- agent/author
- agent/severity
- agent/title
- agent/references
- agent/weakness
- agent/description
- agent/event
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco business 220-8t-e-2g
- version/cisco business 220-8t-e-2g/1.2.0.6
- canonical/cisco business 220-8t-e-2g firmware
- canonical/cisco business 220-8p-e-2g
- version/cisco business 220-8p-e-2g/1.2.0.6
- canonical/cisco business 220-8p-e-2g firmware
- canonical/cisco business 220-8fp-e-2g firmware
- version/cisco business 220-8fp-e-2g firmware/1.2.0.6
- canonical/cisco business 220-16t-2g firmware
- version/cisco business 220-16t-2g firmware/1.2.0.6
- canonical/cisco business 220-16p-2g firmware
- version/cisco business 220-16p-2g firmware/1.2.0.6
- canonical/cisco business 220-24t-4g firmware
- version/cisco business 220-24t-4g firmware/1.2.0.6
- canonical/cisco business 220-24p-4g firmware
- version/cisco business 220-24p-4g firmware/1.2.0.6
- canonical/cisco business 220-24fp-4g firmware
- version/cisco business 220-24fp-4g firmware/1.2.0.6
- canonical/cisco business 220-48t-4g firmware
- version/cisco business 220-48t-4g firmware/1.2.0.6
- canonical/cisco business 220 series firmware
- version/cisco business 220 series firmware/1.2.0.6
- canonical/cisco business 220-48p-4g
- canonical/cisco business 220-24t-4x
- version/cisco business 220-24t-4x/1.2.0.6
- canonical/cisco business 220-24t-4x firmware
- canonical/cisco business 220-24p-4x
- version/cisco business 220-24p-4x/1.2.0.6
- canonical/cisco business 220-24p-4x firmware
- canonical/cisco business 220-24fp-4x firmware
- version/cisco business 220-24fp-4x firmware/1.2.0.6
- canonical/cisco business 220-48t-4x firmware
- canonical/cisco business 220-48p-4x firmware
- version/cisco business 220-48p-4x firmware/1.2.0.6
- canonical/cisco business 220-48fp-4x firmware
- version/cisco business 220-48fp-4x firmware/1.2.0.6