PT-2021-1877 · Cisco · Cisco Smart Software Manager Satellite+1

Published 2021-01-20 · Updated 2021-01-28 · CVE-2021-1218

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco Smart Software Manager On-Prem (affected versions not specified) Cisco Smart Software Manager satellite (affected versions not specified)

Description The issue is related to the web management interface of Cisco Smart Software Manager, where improper input validation of URL parameters in an HTTP request can lead to a redirect to an undesired web page. An attacker could exploit this by sending a crafted HTTP request, potentially redirecting a user to a malicious website.

Recommendations For Cisco Smart Software Manager On-Prem, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Cisco Smart Software Manager satellite, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

BDU:2021-00646

CVE-2021-1218

Affected Products

Cisco Smart Software Manager On-Prem

Cisco Smart Software Manager Satellite

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssmor-MDCWkT2x · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-1218 · Security Note
• https://bdu.fstec.ru/vul/2021-00646 · Security Note
• https://osv.dev/vulnerability/CVE-2021-1218 · Vendor Advisory
• https://t.me/cibsecurity/22463 · Telegram Post