{"uuid": "4e78e404-31c1-49fd-bbbe-020a73137704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-1567", "type": "seen", "source": "https://t.me/hacking_Attack/13348", "content": "Black Hat Ethical Hacking\nCisco Smart Switches Riddled with Severe Security Holes\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Cisco Smart Switches Riddled with Severe Security HolesPost Views: 60 \nReading Time: 1 Minute\nCisco has flagged and patched several high-severity security vulnerabilities in its Cisco Small Business 220 Series Smart Switches that could allow session hijacking, arbitrary code execution, cross-site scripting and HTML injection.\nIt also issued fixes for high-severity problems in the AnyConnect secure mobility client, the Cisco DNA Center and the Cisco Email Security Appliance, along with a slew of patches for medium-severity vulnerabilities in AnyConnect, Jabber, Meeting Server, Unified Intelligence Center and Webex.\n\nThe high-severity issues are as follows:\n\n* CVE-2021-1566:\u00a0Cisco Email Security Appliance and Cisco Web Security Appliance (Certificate-Validation Vulnerability)\n* CVE-2021-1134:\u00a0Cisco DNA Center (Certificate Validation Vulnerability)\n* CVE-2021-1541 through 1543; CVE-2021-1571:\u00a0Cisco Small Business 220 Series Smart Switches (Session Hijacking, Arbitrary Code-Execution, Cross-Site Scripting, HTML Injection)\n* CVE-2021-1567:\u00a0Cisco AnyConnect Secure Mobility Client for Windows with VPN Posture (HostScan) Module (DLL Hijacking)\n\nThe most severe issue in this crop of patches is tracked as CVE-2021-1542, in the Cisco Small Business 220 Series Smart Switches. These are entry-level switches that act as the basic building blocks for small- and medium-sized business networks. They\u2019re responsible for sharing network resources and connecting various clients, including computers, printers and servers, to the network and each other, along with security, governing network performance and more.\nSee Also: RockYou2021: largest password compilation of all time leaked online \u2013 8.4 billion entries The bug rates 7.5 on the 10-point CVSS vulnerability-severity scale, and arises from weak session management for the web-based management interface of the switches. An unauthenticated, remote attacker could use it to bypass authentication protections and gain unauthorized access to the interface, according to the advisory. The attacker could then obtain the privileges of the highjacked session account, which could include administrative privileges, and thus gain free rein on the switch.\n\n\u201cThis vulnerability is due to the use of weak session management for session identifier values,\u201d according to Cisco. \u201cAn attacker could exploit this vulnerability by using reconnaissance methods to determine how to craft a valid session identifier. A successful exploit could allow the attacker [to] take actions within the management interface with privileges up to the level of the administrative user.\u201d Multiple Patches for Smart SwitchesThere are also multiple other security flaws in the same web-management interface. For instance, the bug tracked as CVE-2021-1541\u00a0is an arbitrary code-execution vulnerability that would allow an authenticated, remote attacker to execute arbitrary commands as a root user on the underlying operating system.\n\n\u201cThis vulnerability is due to a lack of parameter validation for TFTP configuration parameters,\u201d according to Cisco. \u201cAn attacker could exploit this vulnerability by entering crafted input for specific TFTP configuration parameters. A successful exploit could allow the attacker to execute arbitrary commands as a root user on the underlying operating system.\u201d\nSee Also: Offensive Security Tool: CloudFail The attacker must have valid administrative credentials on the device in order to exploit the issue, so the CVSS score comes in at 7.2 rather than critical[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:12.329252Z"}