CVE-2021-1218

A vulnerability in the web management interface of Cisco Smart Software Manager satellite could allow an authenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request that could cause the web application to redirect the request to a specified malicious URL. A successful exploit could allow the attacker to redirect a user to a malicious website.

• CWE-601

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssmor-MDCWkT2xVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssmor-MDCWkT2xVendor Advisory

Published

Jan 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1212Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2021-1213Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2021-1214Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2021-1215Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2021-1216Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2021-1217Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2021-1219A vulnerability in Cisco Smart Software Manager Satellite co…7.8
• CVE-2021-1220Multiple vulnerabilities in the web UI of Cisco IOS XE Softw…4.3
• CVE-2021-1221A vulnerability in the user interface of Cisco Webex Meeting…4.1
• CVE-2021-1222A vulnerability in the web-based management interface of Cis…8.1
• CVE-2021-1223Multiple Cisco products are affected by a vulnerability in t…7.5
• CVE-2021-1224Multiple Cisco products are affected by a vulnerability with…5.3