Cisco Small Business 220 Series Smart Switch Service Data Protection

The vulnerability of the microprogrammed software of Cisco Small Business 220 Series Smart Switches lies in the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain access to login credentials or reconfigure passwords in the user account...

Cisco Small Business LLDP DoS Execution Code

The vulnerability of the Link Layer Discovery Protocol LLDP implementation in Cisco Small Business 220 router software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary...

CVE-2021-34779

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...

CVE-2021-34775

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...

Design/Logic Flaw

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...

CVE-2021-34775

CVE-2021-34775 affects Cisco Small Business 220 Series Smart Switches with LLDP enabled. An unauthenticated, adjacent attacker can execute code on the device, cause a reload, or induce LLDP database corruption via LLDP processing. The attack requires being on the same Layer 2 broadcast domain. Ci...

CVE-2021-34776

CVE-2021-34776 refers to multiple vulnerabilities in the LLDP implementation of Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could execute code on the device or cause a reload, and LLDP database corruption could occur. The advisory attributes the issues to...

PT-2021-4955

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 Series Smart Switches affected versions not specified Description The issue is related to the Link Layer Discovery Protocol LLDP implementation and involves a buffer overflow due to lack of input validation. An...

PT-2021-4907

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 Series Smart Switches affected versions not specified Description The issue is related to a buffer overflow vulnerability in the Link Layer Discovery Protocol LLDP implementation. An unauthenticated, adjacent attacker...

PT-2021-4663

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 Series Smart Switches affected versions not specified Description The issue is related to the implementation of the Link Layer Discovery Protocol LLDP in the firmware of Cisco Small Business 220 Series Smart Switches. ...

PT-2021-4656

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 Series Smart Switches affected versions not specified Description The issue is related to the implementation of the Link Layer Discovery Protocol LLDP in the firmware of Cisco Small Business 220 Series Smart Switches. ...

PT-2021-20657

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 220 Series Smart Switches affected versions not specified Description: Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation. An unauthenticated, adjacent attacker could execute code on t...

PT-2021-20656

Name of the Vulnerable Software and Affected Versions: Cisco Small Business 220 Series Smart Switches affected versions not specified Description: Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation. An unauthenticated, adjacent attacker could execute code on t...

CVE-2021-34777: Buffer Copy without Checking Size of Input

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...

CVE-2021-34775: Buffer Copy without Checking Size of Input

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...

CVE-2021-34778: Buffer Copy without Checking Size of Input

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...

CVE-2021-34779: Buffer Copy without Checking Size of Input

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...

CVE-2021-34776: Buffer Copy without Checking Size of Input

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...

CVE-2021-34780: Buffer Copy without Checking Size of Input

Multiple vulnerabilities exist in the Link Layer Discovery Protocol LLDP implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database...

Cisco BPA, WSA Bugs Allow Remote Cyberattacks

A set of high-severity privilege-escalation vulnerabilities affecting Business Process Automation BPA application and Cisco’s Web Security Appliance WSA and could allow authenticated, remote attackers to access sensitive data or take over a targeted system. The first two bugs CVE-2021-1574 and...