CVE-2021-1403

🗓️ 24 Mar 2021 20:15:14Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 11 Views

A vulnerability in the web UI feature of Cisco IOS XE Softwar

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability in the web interface of Cisco IOS XE operating systems allows a hacker to trigger a service failure.	13 Apr 202100:00	–	bdu_fstec
Cisco	Cisco IOS XE Software Web UI Cross-Site WebSocket Hijacking Vulnerability	24 Mar 202116:00	–	cisco
Tenable Nessus	Cisco IOS XE Software Web UI Cross Site WebSocket Hijacking (cisco-sa-iosxe-cswsh-FKk9AzT5)	25 Mar 202100:00	–	nessus
CNNVD	Cisco IOS XE 数据伪造问题漏洞	24 Mar 202100:00	–	cnnvd
CVE	CVE-2021-1403	24 Mar 202120:07	–	cve
Cvelist	CVE-2021-1403 Cisco IOS XE Software Web UI Cross-Site WebSocket Hijacking Vulnerability	24 Mar 202120:07	–	cvelist
EUVD	EUVD-2021-6870	3 Oct 202520:07	–	euvd
ICS	ICSA-21-110-02_Rockwell Automation Stratix Switches	20 Apr 202100:00	–	ics
NCSC	Vulnerabilities fixed in Cisco products	25 Mar 202100:00	–	ncsc
Prion	Cross site scripting	24 Mar 202120:15	–	prion

NVD

Node

cisco ios_xeMatch3.15.1xbs

OR

cisco ios_xeMatch3.15.2xbs

OR

cisco ios_xeMatch16.3.1

OR

cisco ios_xeMatch16.3.1a

OR

cisco ios_xeMatch16.3.2

OR

cisco ios_xeMatch16.3.3

OR

cisco ios_xeMatch16.3.4

OR

cisco ios_xeMatch16.3.5

OR

cisco ios_xeMatch16.3.5b

OR

cisco ios_xeMatch16.3.6

OR

cisco ios_xeMatch16.3.7

OR

cisco ios_xeMatch16.3.8

OR

cisco ios_xeMatch16.3.9

OR

cisco ios_xeMatch16.3.10

OR

cisco ios_xeMatch16.3.11

OR

cisco ios_xeMatch16.4.1

OR

cisco ios_xeMatch16.4.2

OR

cisco ios_xeMatch16.4.3

OR

cisco ios_xeMatch16.5.1

OR

cisco ios_xeMatch16.5.1a

OR

cisco ios_xeMatch16.5.1b

OR

cisco ios_xeMatch16.5.2

OR

cisco ios_xeMatch16.5.3

OR

cisco ios_xeMatch16.6.1

OR

cisco ios_xeMatch16.6.2

OR

cisco ios_xeMatch16.6.3

OR

cisco ios_xeMatch16.6.4

OR

cisco ios_xeMatch16.6.4a

OR

cisco ios_xeMatch16.6.4s

OR

cisco ios_xeMatch16.6.5

OR

cisco ios_xeMatch16.6.5a

OR

cisco ios_xeMatch16.6.5b

OR

cisco ios_xeMatch16.6.6

OR

cisco ios_xeMatch16.6.7

OR

cisco ios_xeMatch16.6.7a

OR

cisco ios_xeMatch16.6.8

OR

cisco ios_xeMatch16.7.1

OR

cisco ios_xeMatch16.7.1a

OR

cisco ios_xeMatch16.7.1b

OR

cisco ios_xeMatch16.7.2

OR

cisco ios_xeMatch16.7.3

OR

cisco ios_xeMatch16.7.4

OR

cisco ios_xeMatch16.8.1

OR

cisco ios_xeMatch16.8.1a

OR

cisco ios_xeMatch16.8.1b

OR

cisco ios_xeMatch16.8.1c

OR

cisco ios_xeMatch16.8.1d

OR

cisco ios_xeMatch16.8.1e

OR

cisco ios_xeMatch16.8.1s

OR

cisco ios_xeMatch16.8.2

OR

cisco ios_xeMatch16.8.3

OR

cisco ios_xeMatch16.9.1

OR

cisco ios_xeMatch16.9.1a

OR

cisco ios_xeMatch16.9.1b

OR

cisco ios_xeMatch16.9.1c

OR

cisco ios_xeMatch16.9.1d

OR

cisco ios_xeMatch16.9.1s

OR

cisco ios_xeMatch16.9.2

OR

cisco ios_xeMatch16.9.2a

OR

cisco ios_xeMatch16.9.2s

OR

cisco ios_xeMatch16.9.3

OR

cisco ios_xeMatch16.9.3a

OR

cisco ios_xeMatch16.9.3h

OR

cisco ios_xeMatch16.9.3s

OR

cisco ios_xeMatch16.9.4

OR

cisco ios_xeMatch16.9.4c

OR

cisco ios_xeMatch16.9.5

OR

cisco ios_xeMatch16.9.5f

OR

cisco ios_xeMatch16.9.6

OR

cisco ios_xeMatch16.10.1

OR

cisco ios_xeMatch16.10.1a

OR

cisco ios_xeMatch16.10.1b

OR

cisco ios_xeMatch16.10.1c

OR

cisco ios_xeMatch16.10.1d

OR

cisco ios_xeMatch16.10.1e

OR

cisco ios_xeMatch16.10.1f

OR

cisco ios_xeMatch16.10.1g

OR

cisco ios_xeMatch16.10.1s

OR

cisco ios_xeMatch16.10.2

OR

cisco ios_xeMatch16.10.3

OR

cisco ios_xeMatch16.11.1

OR

cisco ios_xeMatch16.11.1a

OR

cisco ios_xeMatch16.11.1b

OR

cisco ios_xeMatch16.11.1c

OR

cisco ios_xeMatch16.11.1s

OR

cisco ios_xeMatch16.11.2

OR

cisco ios_xeMatch16.12.1

OR

cisco ios_xeMatch16.12.1a

OR

cisco ios_xeMatch16.12.1c

OR

cisco ios_xeMatch16.12.1s

OR

cisco ios_xeMatch16.12.1t

OR

cisco ios_xeMatch16.12.1w

OR

cisco ios_xeMatch16.12.1x

OR

cisco ios_xeMatch16.12.1y

OR

cisco ios_xeMatch16.12.1z

OR

cisco ios_xeMatch16.12.1za

OR

cisco ios_xeMatch16.12.2

OR

cisco ios_xeMatch16.12.2a

OR

cisco ios_xeMatch16.12.2s

OR

cisco ios_xeMatch16.12.2t

OR

cisco ios_xeMatch16.12.3

OR

cisco ios_xeMatch16.12.3a

OR

cisco ios_xeMatch16.12.3s

OR

cisco ios_xeMatch16.12.4

OR

cisco ios_xeMatch16.12.4a

OR

cisco ios_xeMatch17.1.1

OR

cisco ios_xeMatch17.1.1a

OR

cisco ios_xeMatch17.1.1s

OR

cisco ios_xeMatch17.1.1t

OR

cisco ios_xeMatch17.1.2

OR

cisco ios_xeMatch17.1.3

OR

cisco ios_xeMatch17.2.1

OR

cisco ios_xeMatch17.2.1a

OR

cisco ios_xeMatch17.2.1r

OR

cisco ios_xeMatch17.2.1v

OR

cisco ios_xeMatch17.2.2

OR

cisco ios_xeMatch17.2.3

OR

cisco ios_xeMatch17.3.1

OR

cisco ios_xeMatch17.3.1a

OR

cisco ios_xeMatch17.3.1w

OR

cisco ios_xeMatch17.3.1x

OR

cisco ios_xeMatch17.3.2

OR

cisco ios_xeMatch17.3.2a

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-cswsh-FKk9AzT5

21 Nov 2024 05:44Current

CVSS 27.1

CVSS 3.17.4

EPSS0.006

CWE-1021 CWE-345

vulnerability web ui cisco ios xe software cross-site websocket hijacking denial of service