← Database

CVE-2021-34736

MEDIUM CVSS: 5.3 Published: 2021-10-21 Modified: 2026-06-17

Description

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to cause the web-based management interface to unexpectedly restart. The vulnerability is due to insufficient input validation on the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to cause the interface to restart, resulting in a denial of service (DoS) condition.

Affected Platforms

Cisco Ucs C240 M3Cisco Ucs S3260Cisco Ucs C220 M4Cisco Ucs C260 M2Cisco Ucs C4200Cisco Ucs C220 M3Cisco Ucs C125 M5Cisco Ucs C240 Sd M5Cisco Unified Computing SystemCisco Ucs C420 M3

Weakness Type

CWE-20, CWE-20

References