CVE-2021-40127 Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Interface Denial of Service Vulnerability
Unauthenticated remote attackers can cause a permanent denial of service on the web management interface of Cisco Small Business switches via crafted HTTP requests.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-40127?
CVE-2021-40127 is a medium-severity denial of service vulnerability in Cisco Small Business Smart and Managed Switches, published on 4 Nov 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an unauthenticated, remote attacker to render the web-based management interface unusable, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to cause a permanent invalid redirect for requests sent to the web-based management interface of the device, resulting in a DoS condition.
Weakness: CWE-20
Which versions are affected by CVE-2021-40127?
It affects 66 products.
Products include Cisco Sf200-24 Firmware, Cisco Sf200-24fp Firmware, Cisco Sf200-24p Firmware, Cisco Sf200-48 Firmware, Cisco Sf200-48p Firmware, Cisco Sf200e-24 Firmware and 60 more.
How do I fix CVE-2021-40127?
No fix has been published for CVE-2021-40127 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2021-40127 being exploited?
There is no known exploitation of CVE-2021-40127 in the wild and no public exploit code.
Other vulnerabilities in Cisco Small Business Smart and Managed Switches
- CVE-2018-15439 Cisco Small Business Switches Privileged Access Vulnerability
- CVE-2020-3363 Cisco Small Business Smart and Managed Switches Denial of Service Vulnerability
- CVE-2020-3297 Cisco Small Business Smart and Managed Switches Session Management Vulnerability
- CVE-2019-12636 Cisco Small Business Smart and Managed Switches Cross-Site Request Forgery Vulnerability
- CVE-2019-15993 Cisco Small Business Switches Information Disclosure Vulnerability
Sources
Also known as GHSA-mq2g-mwpw-5386.