CVE-2021-34736

Cisco Integrated Management Controller GUI Denial of Service Vulnerability

HIGH

7.5

CVSS Score

Published: October 21, 2021 at 02:50 AM UTC

Updated: June 17, 2026 at 03:56 AM UTC

23 products affected across 1 vendorUnified Computing SystemUcs S3260Ucs C125 M5

Using Cisco Unified Computing System (Managed) by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Unified Computing System (Managed) - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 1%

SSVC

No known exploit

Description

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to cause the web-based management interface to unexpectedly restart. The vulnerability is due to insufficient input validation on the web-based management interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to cause the interface to restart, resulting in a denial of service (DoS) condition.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Unified Computing System · Cisco

95%

v < 4.1(2g)v < 4.1(3e)4.2 ≤ v < 4.2(1b)

Affected range stops below 4.1(2g), so it looks safe — our inference, not a vendor statement

Affected range stops below 4.1(3e), so it looks safe — our inference, not a vendor statement

Affected range stops below 4.2(1b), so it looks safe — our inference, not a vendor statement

cisco-ucs-c125-m5 (environment) · cisco-ucs-c22-m3 (environment) · cisco-ucs-c220-m3 (environment) · cisco-ucs-c220-m4 (environment) · cisco-ucs-c220-m5 (environment) · cisco-ucs-c225-m6 (environment) · cisco-ucs-c24-m3 (environment) · cisco-ucs-c240-m3 (environment) · cisco-ucs-c240-m5 (environment) · cisco-ucs-c240-sd-m5 (environment) · cisco-ucs-c245-m6 (environment) · cisco-ucs-c260-m2 (environment) · cisco-ucs-c3160 (environment) · cisco-ucs-c3260 (environment) · cisco-ucs-c420-m3 (environment) · cisco-ucs-c4200 (environment) · cisco-ucs-c460-m2 (environment) · cisco-ucs-c460-m4 (environment) · cisco-ucs-c480-m5 (environment) · cisco-ucs-c480-ml-m5 (environment) · cisco-ucs-c890-m5 (environment) · cisco-ucs-s3260 (environment)

Ucs C125 M5 · Ciscodevice

80%

All versions

Ucs C22 M3 · Ciscodevice

80%

All versions

Ucs C220 M3 · Ciscodevice

80%

All versions

Ucs C220 M4 · Ciscodevice

80%

All versions