What’s Vulnerable › Vulnerabilities
CVE-2021-34744: Cisco Business 220 Series Smart Switches Static Key and Password Vulnerabilities
- Severity: medium (CVSS 4.9 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2021-10-06 · updated 2026-06-17
- Weakness: CWE-540
Description
Multiple vulnerabilities in Cisco Business 220 Series Smart Switches firmware could allow an attacker with Administrator privileges to access sensitive login credentials or reconfigure the passwords on the user account. For more information about these vulnerabilities, see the Details section of this advisory.
Affected products
- Cisco Business 220-16P-2G Firmware: through 1.2.0.6
- Cisco Business 220-16T-2G Firmware: through 1.2.0.6
- Cisco Business 220-24Fp-4G Firmware: through 1.2.0.6
- Cisco Business 220-24Fp-4X Firmware: through 1.2.0.6
- Cisco Business 220-24P-4G Firmware: through 1.2.0.6
- Cisco Business 220-24P-4X Firmware: through 1.2.0.6
- Cisco Business 220-24T-4G Firmware: through 1.2.0.6
- Cisco Business 220-24T-4X Firmware: through 1.2.0.6
- Cisco Business 220-48Fp-4X Firmware: through 1.2.0.6
- Cisco Business 220-48P-4G Firmware: through 1.2.0.6
- Cisco Business 220-48P-4X Firmware: through 1.2.0.6
- Cisco Business 220-48T-4G Firmware: through 1.2.0.6
- Cisco Business 220-48T-4X Firmware: through 1.2.0.6
- Cisco Business 220-8Fp-E-2G Firmware: through 1.2.0.6
- Cisco Business 220-8P-E-2G Firmware: through 1.2.0.6
- Cisco Business 220-8T-E-2G Firmware: through 1.2.0.6
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-hardcoded-cred-MJCEXvX
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-hardcoded-cred-MJCEXvX
Get alerted when CVE-2021-34744 or the next vulnerability affects your stack