CVE-2021-1220

lowPriorität · verfolgen · 17EPSS 0.010 · 62. PerzentilEURUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.98% (62nd) EPSS

CVSS 3.5 · low

Is it mine?

85 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Multiple vulnerabilities in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to cause the web UI software to become unresponsive and consume vty line instances, resulting in a denial of service (DoS) condition. These vulnerabilities are due to insufficient error handling in the web UI. An attacker could exploit these vulnerabilities by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to cause the web UI software to become unresponsive and consume all available vty lines, preventing new session establishment and resulting in a DoS condition. Manual intervention would be required to regain web UI and vty session functionality. Note: These vulnerabilities do not affect the console connection.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behoben16.11.1cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.11.1acisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.11.1bcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.11.1ccisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.11.1scisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.11.2cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.1cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.1acisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.1ccisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.1scisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.1tcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.1wcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.1xcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.1ycisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.1zcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.2cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.2acisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.2scisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.2tcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.3cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.3acisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.3scisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.4cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben16.12.4acisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben17.1.1cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben17.1.1acisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben17.1.1scisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben17.1.1tcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben17.1.2cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben17.11.99SWcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben17.2.1cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben17.2.1acisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben17.2.1rcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Behoben17.2.1vcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
BehobenStratix 5400cisa_csaf_ot
Stratix 5800: Apply Version 17.04.01 or later. If possible, disable DECnet protocol completely or on select interfaces.
BehobenStratix 5410cisa_csaf_ot
Stratix 5800: Apply Version 17.04.01 or later. If possible, disable DECnet protocol completely or on select interfaces.
BehobenStratix 5700cisa_csaf_ot
Stratix 5800: Apply Version 17.04.01 or later. If possible, disable DECnet protocol completely or on select interfaces.
BehobenStratix 5800cisa_csaf_ot
Stratix 5800: Apply Version 17.04.01 or later. If possible, disable DECnet protocol completely or on select interfaces.
BehobenStratix 8000cisa_csaf_ot
Stratix 5800: Apply Version 17.04.01 or later. If possible, disable DECnet protocol completely or on select interfaces.
MitigationStratix 5400cisa_csaf_ot
All versions, including Stratix 8000, Stratix 5700, Stratix 5410, Stratix 5400: Confirm the least-privilege user principle is followed, and user account access to is only granted with a minimum number of rights as needed.
MitigationStratix 5410cisa_csaf_ot
All versions, including Stratix 8000, Stratix 5700, Stratix 5410, Stratix 5400: Confirm the least-privilege user principle is followed, and user account access to is only granted with a minimum number of rights as needed.
MitigationStratix 5700cisa_csaf_ot
All versions, including Stratix 8000, Stratix 5700, Stratix 5410, Stratix 5400: Confirm the least-privilege user principle is followed, and user account access to is only granted with a minimum number of rights as needed.
MitigationStratix 5800cisa_csaf_ot
All versions, including Stratix 8000, Stratix 5700, Stratix 5410, Stratix 5400: Confirm the least-privilege user principle is followed, and user account access to is only granted with a minimum number of rights as needed.
MitigationStratix 8000cisa_csaf_ot
All versions, including Stratix 8000, Stratix 5700, Stratix 5410, Stratix 5400: Confirm the least-privilege user principle is followed, and user account access to is only granted with a minimum number of rights as needed.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · low–medium · 3.5–5.5

v2.03.5lowAV:N/AC:M/Au:S/C:N/I:N/A:Pprimary · NVD / NIST USAusnutzbarkeit 6.8 · Auswirkung 2.9

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Lprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 1.4

v3.05.5mediumCVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:Nsecondary · CISA US

v3.14.3mediumAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Lsecondary · FSTEC (BDU) RU

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Lsecondary · ENISA EU

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Lsecondary · psirt@cisco.com USAusnutzbarkeit 2.8 · Auswirkung 1.4

v3.14mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:Usecondary · CVSS-BT (t0sche)

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Lsecondary · Cisco PSIRT US

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-20USCWE-20USCWE-20US

betroffene Produkte (85)

Betroffene Produkte und Versionsbereiche.

Stratix 5400: Versions 15.2(7)E3 and earlieralle Versionencisa_csaf_otUS
Stratix 5410: Versions 15.2(7)E3 and earlieralle Versionencisa_csaf_otUS
Stratix 5700: Versions 15.2(7)E3 and earlieralle Versionencisa_csaf_otUS
Stratix 5800: Versions 16.12.01 and earlieralle Versionencisa_csaf_otUS
Stratix 8000: Versions 15.2(7)E3 and earlieralle Versionencisa_csaf_otUS
Rockwell Automation Stratix 5400≤ 15.2(7)E3cisa_csaf_otUS
Rockwell Automation Stratix 5410≤ 15.2(7)E3cisa_csaf_otUS
Rockwell Automation Stratix 5700≤ 15.2(7)E3cisa_csaf_otUS
Rockwell Automation Stratix 5800≤ 16.12.01cisa_csaf_otUS
Rockwell Automation Stratix 8000≤ 15.2(7)E3cisa_csaf_otUS
Cisco 16.11.1alle Versionencisco_csafUS
Cisco 16.11.1aalle Versionencisco_csafUS
Cisco 16.11.1balle Versionencisco_csafUS
Cisco 16.11.1calle Versionencisco_csafUS
Cisco 16.11.1salle Versionencisco_csafUS
Cisco 16.11.2alle Versionencisco_csafUS
Cisco 16.12.1alle Versionencisco_csafUS
Cisco 16.12.1aalle Versionencisco_csafUS
Cisco 16.12.1calle Versionencisco_csafUS
Cisco 16.12.1salle Versionencisco_csafUS

20 von 85 angezeigt

Advisories (2)

Hersteller- und Ökosystem-Meldungen dazu.

cisco-sa-xe-webui-dos-z9yqYQAnCisco IOS XE Software Web UI Denial of Service Vulnerabilities2021-03-24csaf · cisco_csafUS
Multiple vulnerabilities in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to cause the web UI software to become unresponsive and consume vty line instances, resulting in a denial of service (DoS) condition. These vulnerabilities are due to insufficient error handling in the web UI. An attacker could exploit these vulnerabilities by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to cause the web UI software to become unresponsive and consume all available vty lines, preventing new session establishment and resulting in a DoS condition. Manual intervention would be required to regain web UI and vty session functionality. Note: These vulnerabilities do not affect the console connection. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
ICSA-21-110-02ICSA-21-110-02_Rockwell Automation Stratix Switches2021-04-20icsa · cisa_csaf_otUS
Cisco reported these vulnerabilities to Rockwell Automation.

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot cisco_csaf NVD CVE.org MITRE

veröffentlicht 2021-03-24geändert 2026-06-17

Referenzen (6)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan