6.1
CVSSv3

CVE-2021-34772

Published: 06/10/2021 Updated: 07/11/2023
CVSS v2 Base Score: 5.8 | Impact Score: 4.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 516
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N

Vulnerability Summary

A vulnerability in the web-based management interface of Cisco Orbital could allow an unauthenticated, remote malicious user to redirect users to a malicious webpage. This vulnerability is due to improper validation of URL paths in the web-based management interface. An attacker could exploit this vulnerability by persuading a user to click a crafted URL. A successful exploit could allow the malicious user to redirect a user to a malicious website. This vulnerability, known as an open redirect attack, is used in phishing attacks to persuade users to visit malicious sites.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco orbital -

Vendor Advisories

A vulnerability in the web-based management interface of Cisco Orbital could allow an unauthenticated, remote attacker to redirect users to a malicious webpage This vulnerability is due to improper validation of URL paths in the web-based management interface An attacker could exploit this vulnerability by persuading a user to click a crafted URL ...