CVE-2021-1397: Cisco c125 m5 Firmware

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website. This vulnerability is known as an open redirect attack, which is used in phishing attacks to get users to visit malicious sites without their knowledge.

Affected products

  • Cisco c125 m5 Firmware: up to and including 4.1\(2f\)
  • Cisco c220 m5 Firmware: up to and including 4.1\(2f\)
  • Cisco c220 m6 Firmware: up to and including 4.1\(2f\)
  • Cisco c225 m6 Firmware: up to and including 4.1\(2f\)
  • Cisco c240 m5 Firmware: up to and including 4.1\(2f\)
  • Cisco c240 m6 Firmware: up to and including 4.1\(2f\)
  • Cisco c245 m6 Firmware: up to and including 4.1\(2f\)
  • Cisco c480 m5 Firmware: up to and including 4.1\(2f\)
  • Cisco c480 Ml m5 Firmware: up to and including 4.1\(2f\)
  • Cisco Encs 5100 Firmware: up to and including 4.4.2
  • Cisco Encs 5400 Firmware: up to and including 4.4.2
  • Cisco Integrated Management Controller: before 3.2\(12.4\) (fixed in 3.2\(12.4\))
  • Cisco Ucs-e1120d-m3 Firmware: up to and including 3.2\(11.5\)
  • Cisco Ucs-e140d Firmware: up to and including 3.2\(11.5\)
  • Cisco Ucs-e140dp Firmware: up to and including 3.2\(11.5\)
  • Cisco Ucs-e140s-m1 Firmware: up to and including 3.2\(11.5\)
  • Cisco Ucs-e140s-m2 Firmware: up to and including 3.2\(11.5\)
  • Cisco Ucs-e140s Firmware: up to and including 3.2\(11.5\)
  • Cisco Ucs-e160d Firmware: up to and including 3.2\(11.5\)
  • Cisco Ucs-e160dp-m1 Firmware: up to and including 3.2\(11.5\)
  • Cisco Ucs-e160s-m3 Firmware: up to and including 3.2\(11.5\)
  • Cisco Ucs-e180d-m2 Firmware: up to and including 3.2\(11.5\)
  • Cisco Ucs-e180d-m3 Firmware: up to and including 3.2\(11.5\)
  • Cisco Ucs Manager: up to and including 4.1\(3b\)
  • Cisco Ucs s3260 Firmware: up to and including 4.0\(2o\)

Published 2021-05-06. Last modified 2026-06-17.