3.3
CVSSv2

CVE-2021-1131

Published: 13/01/2021 Updated: 07/11/2023
CVSS v2 Base Score: 3.3 | Impact Score: 2.9 | Exploitability Score: 6.5
CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8
VMScore: 294
Vector: AV:A/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

A vulnerability in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent malicious user to cause an affected IP camera to reload. The vulnerability is due to missing checks when Cisco Discovery Protocol messages are processed. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected IP camera. A successful exploit could allow the malicious user to cause the affected IP camera to reload unexpectedly, resulting in a denial of service (DoS) condition. Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco video_surveillance_8000p_ip_camera_firmware

cisco video_surveillance_8020_ip_camera_firmware

cisco video_surveillance_8030_ip_camera_firmware

cisco video_surveillance_8070_ip_camera_firmware

cisco video_surveillance_8400_ip_camera_firmware

cisco video_surveillance_8620_ip_camera_firmware

cisco video_surveillance_8630_ip_camera_firmware

cisco video_surveillance_8930_speed_dome_ip_camera_firmware

Vendor Advisories

A vulnerability in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause an affected IP camera to reload The vulnerability is due to missing checks when Cisco Discovery Protocol messages are processed An attacker could exploit this vulnerability b ...