CVE-2021-34734

A vulnerability in the Link Layer Discovery Protocol (LLDP) implementation for the Cisco Video Surveillance 7000 Series IP Cameras firmware could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. This vulnerability is due to improper management of memory resources, referred to as a double free. An attacker could exploit this vulnerability by sending crafted LLDP packets to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

• CWE-415
• CWE-415

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipcamera-lldp-dos-OFP7j9jPatch, Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipcamera-lldp-dos-OFP7j9jPatch, Vendor Advisory

Published

Aug 18, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34729A vulnerability in the CLI of Cisco IOS XE SD-WAN Software a…6.7
• CVE-2021-3473An internal product security audit of Lenovo XClarity Contro…4.9
• CVE-2021-34730A vulnerability in the Universal Plug-and-Play (UPnP) servic…9.8
• CVE-2021-34731A vulnerability in the web-based management interface of Cis…4.8
• CVE-2021-34732A vulnerability in the web-based management interface of Cis…6.1
• CVE-2021-34733A vulnerability in the CLI of Cisco Prime Infrastructure and…5.5
• CVE-2021-34735Multiple vulnerabilities in the Cisco ATA 190 Series Analog …7.5
• CVE-2021-34736A vulnerability in the web-based management interface of Cis…7.5
• CVE-2021-34737A vulnerability in the DHCP version 4 (DHCPv4) server featur…7.5
• CVE-2021-34738Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2021-34739A vulnerability in the web-based management interface of mul…8.1
• CVE-2021-3474There's a flaw in OpenEXR in versions before 3.0.0-beta. A c…5.3