https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 21:05:39 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-05712 bdu:2021-05712 https://cve.radiocsirt.org/vuln/bdu:2021-05712 https://cve.radiocsirt.org/vuln/certfr-2021-avi-846 certfr-2021-avi-846 https://cve.radiocsirt.org/vuln/certfr-2021-avi-846 https://cve.radiocsirt.org/vuln/cisco-sa-smb-switches-tokens-uzwpr4e5 <p>A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> <p>A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p> https://cve.radiocsirt.org/vuln/cisco-sa-smb-switches-tokens-uzwpr4e5 https://cve.radiocsirt.org/vuln/euvd-2026-200055 EUVD-2026-200055 https://cve.radiocsirt.org/vuln/euvd-2026-200055 https://cve.radiocsirt.org/vuln/fkie_cve-2021-34739 <p>A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges.</p> <p>A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-34739 https://cve.radiocsirt.org/vuln/ghsa-5fmw-qrmv-x2mw <p>A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges.</p> <p>A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges.</p> https://cve.radiocsirt.org/vuln/ghsa-5fmw-qrmv-x2mw https://cve.radiocsirt.org/vuln/gsd-2021-34739 gsd-2021-34739 https://cve.radiocsirt.org/vuln/gsd-2021-34739