CVE-2021-1403

A vulnerability in the web UI feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site WebSocket hijacking (CSWSH) attack and cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient HTTP protections in the web UI on an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the web UI to follow a crafted link. A successful exploit could allow the attacker to corrupt memory on the affected device, forcing it to reload and causing a DoS condition.

• CWE-345
• CWE-1021

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-cswsh-FKk9AzT5Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-cswsh-FKk9AzT5Vendor Advisory

Published

Mar 24, 2021

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1397A vulnerability in the web-based management interface of Cis…6.1
• CVE-2021-1398A vulnerability in the boot logic of Cisco IOS XE Software c…6.8
• CVE-2021-1399A vulnerability in the Self Care Portal of Cisco Unified Com…4.3
• CVE-2021-1400Multiple vulnerabilities in the web-based management interfa…8.8
• CVE-2021-1401Multiple vulnerabilities in the web-based management interfa…7.2
• CVE-2021-1402A vulnerability in the software-based SSL/TLS message handle…8.6
• CVE-2021-1404A vulnerability in the PDF parsing module in Clam AntiVirus …7.5
• CVE-2021-1405A vulnerability in the email parsing module in Clam AntiViru…7.5
• CVE-2021-1406A vulnerability in Cisco Unified Communications Manager (Uni…4.9
• CVE-2021-1407Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2021-1408Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2021-1409Multiple vulnerabilities in the web-based management interfa…6.1