{"id":"CVE-2021-34739","aliases":["EUVD-2021-21389","GHSA-5fmw-qrmv-x2mw"],"status":"published","title":"Cisco Small Business Series Switches Session Credentials Replay Vulnerability","description":"A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0167,"percentile":0.77104,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-613"],"published":"2021-11-04T15:40:23Z","modified":"2026-06-17T03:56:27Z","products":[{"vendor":"cisco","product":"cbs250-16p-2g_firmware"},{"vendor":"cisco","product":"cbs250-16t-2g_firmware"},{"vendor":"cisco","product":"cbs250-24fp-4g_firmware"},{"vendor":"cisco","product":"cbs250-24fp-4x_firmware"},{"vendor":"cisco","product":"cbs250-24p-4g_firmware"},{"vendor":"cisco","product":"cbs250-24p-4x_firmware"},{"vendor":"cisco","product":"cbs250-24pp-4g_firmware"},{"vendor":"cisco","product":"cbs250-24t-4g_firmware"},{"vendor":"cisco","product":"cbs250-24t-4x_firmware"},{"vendor":"cisco","product":"cbs250-48p-4g_firmware"},{"vendor":"cisco","product":"cbs250-48p-4x_firmware"},{"vendor":"cisco","product":"cbs250-48pp-4g_firmware"},{"vendor":"cisco","product":"cbs250-48t-4g_firmware"},{"vendor":"cisco","product":"cbs250-48t-4x_firmware"},{"vendor":"cisco","product":"cbs250-8fp-e-2g_firmware"},{"vendor":"cisco","product":"cbs250-8p-e-2g_firmware"},{"vendor":"cisco","product":"cbs250-8pp-d_firmware"},{"vendor":"cisco","product":"cbs250-8pp-e-2g_firmware"},{"vendor":"cisco","product":"cbs250-8t-d_firmware"},{"vendor":"cisco","product":"cbs250-8t-e-2g_firmware"},{"vendor":"cisco","product":"cbs350-12np-4x_firmware"},{"vendor":"cisco","product":"cbs350-12xs_firmware"},{"vendor":"cisco","product":"cbs350-12xt_firmware"},{"vendor":"cisco","product":"cbs350-16fp-2g_firmware"},{"vendor":"cisco","product":"cbs350-16p-2g_firmware"},{"vendor":"cisco","product":"cbs350-16p-e-2g_firmware"},{"vendor":"cisco","product":"cbs350-16t-2g_firmware"},{"vendor":"cisco","product":"cbs350-16t-e-2g_firmware"},{"vendor":"cisco","product":"cbs350-16xts_firmware"},{"vendor":"cisco","product":"cbs350-24fp-4g_firmware"},{"vendor":"cisco","product":"cbs350-24fp-4x_firmware"},{"vendor":"cisco","product":"cbs350-24mgp-4x_firmware"},{"vendor":"cisco","product":"cbs350-24ngp-4x_firmware"},{"vendor":"cisco","product":"cbs350-24p-4g_firmware"},{"vendor":"cisco","product":"cbs350-24p-4x_firmware"},{"vendor":"cisco","product":"cbs350-24s-4g_firmware"},{"vendor":"cisco","product":"cbs350-24t-4g_firmware"},{"vendor":"cisco","product":"cbs350-24t-4x_firmware"},{"vendor":"cisco","product":"cbs350-24xs_firmware"},{"vendor":"cisco","product":"cbs350-24xt_firmware"},{"vendor":"cisco","product":"cbs350-24xts_firmware"},{"vendor":"cisco","product":"cbs350-48fp-4g_firmware"},{"vendor":"cisco","product":"cbs350-48fp-4x_firmware"},{"vendor":"cisco","product":"cbs350-48ngp-4x_firmware"},{"vendor":"cisco","product":"cbs350-48p-4g_firmware"},{"vendor":"cisco","product":"cbs350-48p-4x_firmware"},{"vendor":"cisco","product":"cbs350-48t-4g_firmware"},{"vendor":"cisco","product":"cbs350-48t-4x_firmware"},{"vendor":"cisco","product":"cbs350-48xt-4x_firmware"},{"vendor":"cisco","product":"cbs350-8fp-2g_firmware"},{"vendor":"cisco","product":"cbs350-8fp-e-2g_firmware"},{"vendor":"cisco","product":"cbs350-8mgp-2x_firmware"},{"vendor":"cisco","product":"cbs350-8mp-2x_firmware"},{"vendor":"cisco","product":"cbs350-8p-2g_firmware"},{"vendor":"cisco","product":"cbs350-8p-e-2g_firmware"},{"vendor":"cisco","product":"cbs350-8s-e-2g_firmware"},{"vendor":"cisco","product":"cbs350-8t-e-2g_firmware"},{"vendor":"cisco","product":"cbs350-8xt_firmware"},{"vendor":"cisco","product":"cisco small business smart and managed switches"},{"vendor":"cisco","product":"esw2-350g-52_firmware"},{"vendor":"cisco","product":"esw2-350g-52dc_firmware"},{"vendor":"cisco","product":"esw2-550x-48_firmware"},{"vendor":"cisco","product":"esw2-550x-48dc_firmware"},{"vendor":"cisco","product":"sf200-24_firmware"},{"vendor":"cisco","product":"sf200-24fp_firmware"},{"vendor":"cisco","product":"sf200-24p_firmware"},{"vendor":"cisco","product":"sf200-48_firmware"},{"vendor":"cisco","product":"sf200-48p_firmware"},{"vendor":"cisco","product":"sf250-08_firmware"},{"vendor":"cisco","product":"sf250-08hp_firmware"},{"vendor":"cisco","product":"sf250-10p_firmware"},{"vendor":"cisco","product":"sf250-18_firmware"},{"vendor":"cisco","product":"sf250-24_firmware"},{"vendor":"cisco","product":"sf250-24p_firmware"},{"vendor":"cisco","product":"sf250-26_firmware"},{"vendor":"cisco","product":"sf250-26hp_firmware"},{"vendor":"cisco","product":"sf250-26p_firmware"},{"vendor":"cisco","product":"sf250-48_firmware"},{"vendor":"cisco","product":"sf250-48hp_firmware"},{"vendor":"cisco","product":"sf250-50_firmware"},{"vendor":"cisco","product":"sf250-50hp_firmware"},{"vendor":"cisco","product":"sf250-50p_firmware"},{"vendor":"cisco","product":"sf250x-24_firmware"},{"vendor":"cisco","product":"sf250x-24p_firmware"},{"vendor":"cisco","product":"sf250x-48_firmware"},{"vendor":"cisco","product":"sf250x-48p_firmware"},{"vendor":"cisco","product":"sf300-08_firmware"},{"vendor":"cisco","product":"sf300-24_firmware"},{"vendor":"cisco","product":"sf300-24mp_firmware"},{"vendor":"cisco","product":"sf300-24p_firmware"},{"vendor":"cisco","product":"sf300-24pp_firmware"},{"vendor":"cisco","product":"sf300-48_firmware"},{"vendor":"cisco","product":"sf300-48p_firmware"},{"vendor":"cisco","product":"sf300-48pp_firmware"},{"vendor":"cisco","product":"sf302-08_firmware"},{"vendor":"cisco","product":"sf302-08mp_firmware"},{"vendor":"cisco","product":"sf302-08mpp_firmware"},{"vendor":"cisco","product":"sf302-08p_firmware"},{"vendor":"cisco","product":"sf302-08pp_firmware"},{"vendor":"cisco","product":"sf350-08_firmware"},{"vendor":"cisco","product":"sf350-10_firmware"},{"vendor":"cisco","product":"sf350-10mp_firmware"},{"vendor":"cisco","product":"sf350-10p_firmware"},{"vendor":"cisco","product":"sf350-10sfp_firmware"},{"vendor":"cisco","product":"sf350-20_firmware"},{"vendor":"cisco","product":"sf350-24_firmware"},{"vendor":"cisco","product":"sf350-24mp_firmware"},{"vendor":"cisco","product":"sf350-24p_firmware"},{"vendor":"cisco","product":"sf350-28_firmware"},{"vendor":"cisco","product":"sf350-28mp_firmware"},{"vendor":"cisco","product":"sf350-28p_firmware"},{"vendor":"cisco","product":"sf350-28sfp_firmware"},{"vendor":"cisco","product":"sf350-48_firmware"},{"vendor":"cisco","product":"sf350-48p_firmware"},{"vendor":"cisco","product":"sf350-52_firmware"},{"vendor":"cisco","product":"sf350-52mp_firmware"},{"vendor":"cisco","product":"sf350-52p_firmware"},{"vendor":"cisco","product":"sf350-8mp_firmware"},{"vendor":"cisco","product":"sf350-8pd_firmware"},{"vendor":"cisco","product":"sf352-08_firmware"},{"vendor":"cisco","product":"sf352-08mp_firmware"},{"vendor":"cisco","product":"sf352-08p_firmware"},{"vendor":"cisco","product":"sf355-10p_firmware"},{"vendor":"cisco","product":"sf500-24_firmware"},{"vendor":"cisco","product":"sf500-24mp_firmware"},{"vendor":"cisco","product":"sf500-24p_firmware"},{"vendor":"cisco","product":"sf500-48_firmware"},{"vendor":"cisco","product":"sf500-48mp_firmware"},{"vendor":"cisco","product":"sf500-48p_firmware"},{"vendor":"cisco","product":"sf550x-24_firmware"},{"vendor":"cisco","product":"sf550x-24mp_firmware"},{"vendor":"cisco","product":"sf550x-24p_firmware"},{"vendor":"cisco","product":"sf550x-48_firmware"},{"vendor":"cisco","product":"sf550x-48mp_firmware"},{"vendor":"cisco","product":"sf550x-48p_firmware"},{"vendor":"cisco","product":"sg200-08_firmware"},{"vendor":"cisco","product":"sg200-08p_firmware"},{"vendor":"cisco","product":"sg200-10fp_firmware"},{"vendor":"cisco","product":"sg200-18_firmware"},{"vendor":"cisco","product":"sg200-26_firmware"},{"vendor":"cisco","product":"sg200-26fp_firmware"},{"vendor":"cisco","product":"sg200-26p_firmware"},{"vendor":"cisco","product":"sg200-50_firmware"},{"vendor":"cisco","product":"sg200-50fp_firmware"},{"vendor":"cisco","product":"sg200-50p_firmware"},{"vendor":"cisco","product":"sg300-10_firmware"},{"vendor":"cisco","product":"sg300-10mp_firmware"},{"vendor":"cisco","product":"sg300-10mpp_firmware"},{"vendor":"cisco","product":"sg300-10p_firmware"},{"vendor":"cisco","product":"sg300-10pp_firmware"},{"vendor":"cisco","product":"sg300-10sfp_firmware"},{"vendor":"cisco","product":"sg300-20_firmware"},{"vendor":"cisco","product":"sg300-28_firmware"},{"vendor":"cisco","product":"sg300-28mp_firmware"},{"vendor":"cisco","product":"sg300-28p_firmware"},{"vendor":"cisco","product":"sg300-28pp_firmware"},{"vendor":"cisco","product":"sg300-28sfp_firmware"},{"vendor":"cisco","product":"sg300-52_firmware"},{"vendor":"cisco","product":"sg300-52mp_firmware"},{"vendor":"cisco","product":"sg300-52p_firmware"},{"vendor":"cisco","product":"sg350x-12pmv_firmware"},{"vendor":"cisco","product":"sg350x-24_firmware"},{"vendor":"cisco","product":"sg350x-24mp_firmware"},{"vendor":"cisco","product":"sg350x-24p_firmware"},{"vendor":"cisco","product":"sg350x-24pd_firmware"},{"vendor":"cisco","product":"sg350x-24pv_firmware"},{"vendor":"cisco","product":"sg350x-48_firmware"},{"vendor":"cisco","product":"sg350x-48mp_firmware"},{"vendor":"cisco","product":"sg350x-48p_firmware"},{"vendor":"cisco","product":"sg350x-48pv_firmware"},{"vendor":"cisco","product":"sg350x-8pmd_firmware"},{"vendor":"cisco","product":"sg350xg-24f_firmware"},{"vendor":"cisco","product":"sg350xg-24t_firmware"},{"vendor":"cisco","product":"sg350xg-2f10_firmware"},{"vendor":"cisco","product":"sg350xg-48t_firmware"},{"vendor":"cisco","product":"sg500-28_firmware"},{"vendor":"cisco","product":"sg500-28mpp_firmware"},{"vendor":"cisco","product":"sg500-28p_firmware"},{"vendor":"cisco","product":"sg500-52_firmware"},{"vendor":"cisco","product":"sg500-52mp_firmware"},{"vendor":"cisco","product":"sg500-52p_firmware"},{"vendor":"cisco","product":"sg500x-24_firmware"},{"vendor":"cisco","product":"sg500x-24mpp_firmware"},{"vendor":"cisco","product":"sg500x-24p_firmware"},{"vendor":"cisco","product":"sg500x-48_firmware"},{"vendor":"cisco","product":"sg500x-48mp_firmware"},{"vendor":"cisco","product":"sg500x-48p_firmware"},{"vendor":"cisco","product":"sg500xg-8f8t_firmware"},{"vendor":"cisco","product":"sg550x-24_firmware"},{"vendor":"cisco","product":"sg550x-24mp_firmware"},{"vendor":"cisco","product":"sg550x-24mpp_firmware"},{"vendor":"cisco","product":"sg550x-24p_firmware"},{"vendor":"cisco","product":"sg550x-48_firmware"},{"vendor":"cisco","product":"sg550x-48mp_firmware"},{"vendor":"cisco","product":"sg550x-48p_firmware"},{"vendor":"cisco","product":"sg550xg-24f_firmware"},{"vendor":"cisco","product":"sg550xg-24t_firmware"},{"vendor":"cisco","product":"sg550xg-48t_firmware"},{"vendor":"cisco","product":"sg550xg-8f8t_firmware"},{"vendor":"cisco","product":"sx350x-08_firmware"},{"vendor":"cisco","product":"sx350x-12_firmware"},{"vendor":"cisco","product":"sx350x-24_firmware"},{"vendor":"cisco","product":"sx350x-24f_firmware"},{"vendor":"cisco","product":"sx350x-52_firmware"},{"vendor":"cisco","product":"sx550x-12f_firmware"},{"vendor":"cisco","product":"sx550x-16ft_firmware"},{"vendor":"cisco","product":"sx550x-24_firmware"},{"vendor":"cisco","product":"sx550x-24f_firmware"},{"vendor":"cisco","product":"sx550x-24ft_firmware"},{"vendor":"cisco","product":"sx550x-52_firmware"}],"references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-switches-tokens-UzwpR4e5","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-34739"},{"url":"https://github.com/advisories/GHSA-5fmw-qrmv-x2mw"}],"sources":{"cve":[{"id":"CVE-2021-34739","title":"Cisco Small Business Series Switches Session Credentials Replay Vulnerability","description":"A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges.","status":"published","published":"2021-11-04T15:40:23.357Z","modified":"2024-11-07T21:43:18.199Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-613"],"updated_at":"2026-11-02T14:33:11.59359Z"}],"euvd":[{"id":"EUVD-2021-21389","description":"A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges.","status":"published","published":"2021-11-04T15:40:23Z","modified":"2024-11-07T21:43:18Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:05:07.826667Z"}],"ghsa":[{"id":"GHSA-5fmw-qrmv-x2mw","title":"A vulnerability in the web-based management interface of multiple Cisco Small Business Series...","description":"A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges.","status":"published","published":"2022-05-24T19:19:47Z","modified":"2023-01-30T05:03:35Z","cwes":["CWE-613"],"updated_at":"2026-11-02T14:46:51.868413Z"}],"nvd":[{"id":"CVE-2021-34739","description":"A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges.","status":"published","published":"2021-11-04T16:15:08.577Z","modified":"2026-06-17T03:56:27.877Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-613"],"updated_at":"2026-11-02T14:07:00.549994Z"}]}}