Medium severity · published Jan 20, 2021
CVE-2021-1350
Cisco Umbrella Dashboard Packet Flood Vulnerability
5.3
CVSS
1.3%
EPSS
No
On KEV
Description
A vulnerability in the web UI of Cisco Umbrella could allow an unauthenticated, remote attacker to negatively affect the performance of this service. The vulnerability exists due to insufficient rate limiting controls in the web UI. An attacker could exploit this vulnerability by sending crafted HTTPS packets at a high and sustained rate. A successful exploit could allow the attacker to negatively affect the performance of the web UI. Cisco has addressed this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CU
Cisco Umbrella Insights Virtual Appliance · Cisco
All versions, or not specified · source: vendor
UM
Umbrella · Cisco
All versions, or not specified · source: NVD
Affected product
CU
Cisco Umbrella Insights Virtual Appliance
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-1350
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-1350
Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umb-dos-dgKzDEBP
More from Cisco Umbrella Insights Virtual Appliance
9.8
CVE-2022-20738
Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability
8.6
CVE-2021-1474
Cisco Umbrella Link and CSV Formula Injection Vulnerabilities
7.5
CVE-2022-20773
Cisco Umbrella Virtual Appliance Static SSH Host Key Vulnerability
6.5
CVE-2022-20922
Multiple vulnerabilities in the Server Message Block Version 2 (SMB2) processor of the Snort detection engine on multiple Cisco products could allow an unauthenticated, remote…
6.0
CVE-2026-20246
Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability