|
2023-05-18
|
CVE-2023-20189
|
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.
|
Business_250\-16p\-2g_firmware, Business_250\-16t\-2g_firmware, Business_250\-24fp\-4g_firmware, Business_250\-24fp\-4x_firmware, Business_250\-24p\-4g_firmware, Business_250\-24p\-4x_firmware, Business_250\-24pp\-4g_firmware, Business_250\-24t\-4g_firmware, Business_250\-24t\-4x_firmware, Business_250\-48p\-4g_firmware, Business_250\-48p\-4x_firmware, Business_250\-48pp\-4g_firmware, Business_250\-48t\-4g_firmware, Business_250\-48t\-4x_firmware, Business_250\-8fp\-E\-2g_firmware, Business_250\-8p\-E\-2g_firmware, Business_250\-8pp\-D_firmware, Business_250\-8pp\-E\-2g_firmware, Business_250\-8t\-D_firmware, Business_250\-8t\-E\-2g_firmware, Business_350\-12np\-4x_firmware, Business_350\-12xs_firmware, Business_350\-12xt_firmware, Business_350\-16fp\-2g_firmware, Business_350\-16p\-2g_firmware, Business_350\-16p\-E\-2g_firmware, Business_350\-16t\-2g_firmware, Business_350\-16t\-E\-2g_firmware, Business_350\-16xts_firmware, Business_350\-24fp\-4g_firmware, Business_350\-24fp\-4x_firmware, Business_350\-24mgp\-4x_firmware, Business_350\-24ngp\-4x_firmware, Business_350\-24p\-4g_firmware, Business_350\-24p\-4x_firmware, Business_350\-24s\-4g_firmware, Business_350\-24t\-4g_firmware, Business_350\-24t\-4x_firmware, Business_350\-24xs_firmware, Business_350\-24xt_firmware, Business_350\-24xts_firmware, Business_350\-48fp\-4g_firmware, Business_350\-48fp\-4x_firmware, Business_350\-48ngp\-4x_firmware, Business_350\-48p\-4g_firmware, Business_350\-48p\-4x_firmware, Business_350\-48t\-4g_firmware, Business_350\-48t\-4x_firmware, Business_350\-48xt\-4x_firmware, Business_350\-8fp\-2g_firmware, Business_350\-8fp\-E\-2g_firmware, Business_350\-8mgp\-2x_firmware, Business_350\-8mp\-2x_firmware, Business_350\-8p\-2g_firmware, Business_350\-8p\-E\-2g_firmware, Business_350\-8s\-E\-2g_firmware, Business_350\-8t\-E\-2g_firmware, Business_350\-8xt_firmware, Sf200\-24_firmware, Sf200\-24fp_firmware, Sf200\-24p_firmware, Sf200\-48_firmware, Sf200\-48p_firmware, Sf200e48p_firmware, Sf200e\-24_firmware, Sf200e\-24p_firmware, Sf200e\-48_firmware, Sf200e\-48p_firmware, Sf250\-08_firmware, Sf250\-08hp_firmware, Sf250\-10p_firmware, Sf250\-18_firmware, Sf250\-24_firmware, Sf250\-24p_firmware, Sf250\-26_firmware, Sf250\-26hp_firmware, Sf250\-26p_firmware, Sf250\-48_firmware, Sf250\-48hp_firmware, Sf250\-50_firmware, Sf250\-50hp_firmware, Sf250\-50p_firmware, Sf250x\-24_firmware, Sf250x\-24p_firmware, Sf250x\-48_firmware, Sf250x\-48p_firmware, Sf300\-08_firmware, Sf300\-24_firmware, Sf300\-24mp_firmware, Sf300\-24p_firmware, Sf300\-24pp_firmware, Sf300\-48_firmware, Sf300\-48p_firmware, Sf300\-48pp_firmware, Sf302\-08_firmware, Sf302\-08mpp_firmware, Sf302\-08pp_firmware, Sf350\-08_firmware, Sf350\-10_firmware, Sf350\-10mp_firmware, Sf350\-10p_firmware, Sf350\-10sfp_firmware, Sf350\-20_firmware, Sf350\-24_firmware, Sf350\-24mp_firmware, Sf350\-24p_firmware, Sf350\-28_firmware, Sf350\-28mp_firmware, Sf350\-28p_firmware, Sf350\-28sfp_firmware, Sf350\-48_firmware, Sf350\-48mp_firmware, Sf350\-48p_firmware, Sf350\-52_firmware, Sf350\-52mp_firmware, Sf350\-52p_firmware, Sf350\-8mp_firmware, Sf350\-8pd_firmware, Sf352\-08_firmware, Sf352\-08mp_firmware, Sf352\-08p_firmware, Sf355\-10p_firmware, Sf500\-18p_firmware, Sf500\-24_firmware, Sf500\-24mp_firmware, Sf500\-24p_firmware, Sf500\-48_firmware, Sf500\-48mp_firmware, Sf500\-48p_firmware, Sf550x\-24_firmware, Sf550x\-24mp_firmware, Sf550x\-24p_firmware, Sf550x\-48_firmware, Sf550x\-48mp_firmware, Sf550x\-48p_firmware, Sg200\-08_firmware, Sg200\-08p_firmware, Sg200\-10fp_firmware, Sg200\-18_firmware, Sg200\-26_firmware, Sg200\-26fp_firmware, Sg200\-26p_firmware, Sg200\-50_firmware, Sg200\-50fp_firmware, Sg200\-50p_firmware, Sg250\-08_firmware, Sg250\-08hp_firmware, Sg250\-10p_firmware, Sg250\-18_firmware, Sg250\-24_firmware, Sg250\-24p_firmware, Sg250\-26_firmware, Sg250\-26hp_firmware, Sg250\-26p_firmware, Sg250\-48_firmware, Sg250\-48hp_firmware, Sg250\-50_firmware, Sg250\-50hp_firmware, Sg250\-50p_firmware, Sg250x\-24_firmware, Sg250x\-24p_firmware, Sg250x\-48_firmware, Sg250x\-48p_firmware, Sg300\-10_firmware, Sg300\-10mp_firmware, Sg300\-10mpp_firmware, Sg300\-10p_firmware, Sg300\-10pp_firmware, Sg300\-10sfp_firmware, Sg300\-20_firmware, Sg300\-28_firmware, Sg300\-28mp_firmware, Sg300\-28p_firmware, Sg300\-28pp_firmware, Sg300\-28sfp_firmware, Sg300\-52_firmware, Sg300\-52mp_firmware, Sg300\-52p_firmware, Sg350\-10_firmware, Sg350\-10mp_firmware, Sg350\-10p_firmware, Sg350\-28_firmware, Sg350\-28mp_firmware, Sg350\-28p_firmware, Sg350x\-12pmv_firmware, Sg350x\-24_firmware, Sg350x\-24mp_firmware, Sg350x\-24p_firmware, Sg350x\-24pd_firmware, Sg350x\-24pv_firmware, Sg350x\-48_firmware, Sg350x\-48mp_firmware, Sg350x\-48p_firmware, Sg350x\-48pv_firmware, Sg350x\-8pmd_firmware, Sg350xg\-24f_firmware, Sg350xg\-24t_firmware, Sg350xg\-2f10_firmware, Sg350xg\-48t_firmware, Sg355\-10mp_firmware, Sg355\-10p_firmware, Sg500\-28_firmware, Sg500\-28mpp_firmware, Sg500\-28p_firmware, Sg500\-28pp_firmware, Sg500\-52p_firmware, Sg500\-52pp_firmware, Sg500x24mpp_firmware, Sg500x\-24_firmware, Sg500x\-24mpp_firmware, Sg500x\-24p_firmware, Sg500x\-48_firmware, Sg500x\-48mp_firmware, Sg500x\-48mpp_firmware, Sg500x\-48p_firmware, Sg500xg8f8t_firmware, Sg500xg\-8f8t_firmware, Sg550x\-24_firmware, Sg550x\-24mp_firmware, Sg550x\-24mpp_firmware, Sg550x\-24p_firmware, Sg550x\-48_firmware, Sg550x\-48mp_firmware, Sg550x\-48p_firmware, Sg550x\-48t_firmware, Sg550xg\-24f_firmware, Sg550xg\-24t_firmware, Sg550xg\-48t_firmware, Sg550xg\-8f8t_firmware
|
9.8
|
|
|
|
2020-09-23
|
CVE-2019-15993
|
A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web UI of an affected device. A successful exploit could allow the attacker to access sensitive device information, which includes...
|
Sf200\-24_firmware, Sf200\-24fp_firmware, Sf200\-24p_firmware, Sf200\-48_firmware, Sf200\-48p_firmware, Sf250\-24_firmware, Sf250\-24p_firmware, Sf250\-48_firmware, Sf250\-48hp_firmware, Sf300\-08_firmware, Sf300\-24_firmware, Sf300\-24mp_firmware, Sf300\-24p_firmware, Sf300\-24pp_firmware, Sf300\-48_firmware, Sf300\-48p_firmware, Sf300\-48pp_firmware, Sf302\-08_firmware, Sf302\-08mp_firmware, Sf302\-08mpp_firmware, Sf302\-08p_firmware, Sf302\-08pp_firmware, Sf350\-48_firmware, Sf350\-48mp_firmware, Sf350\-48p_firmware, Sf500\-24_firmware, Sf500\-24p_firmware, Sf500\-48_firmware, Sf500\-48p_firmware, Sf550x\-24_firmware, Sf550x\-24mp_firmware, Sf550x\-24p_firmware, Sf550x\-48_firmware, Sf550x\-48mp_firmware, Sf550x\-48p_firmware, Sg200\-08_firmware, Sg200\-08p_firmware, Sg200\-10fp_firmware, Sg200\-18_firmware, Sg200\-26_firmware, Sg200\-26fp_firmware, Sg200\-26p_firmware, Sg200\-50_firmware, Sg200\-50fp_firmware, Sg200\-50p_firmware, Sg250\-08_firmware, Sg250\-08hp_firmware, Sg250\-10p_firmware, Sg250\-18_firmware, Sg250\-26_firmware, Sg250\-26hp_firmware, Sg250\-26p_firmware, Sg250\-50_firmware, Sg250\-50hp_firmware, Sg250\-50p_firmware, Sg250x\-24_firmware, Sg250x\-24p_firmware, Sg250x\-48_firmware, Sg250x\-48p_firmware, Sg300\-10_firmware, Sg300\-10mp_firmware, Sg300\-10mpp_firmware, Sg300\-10p_firmware, Sg300\-10pp_firmware, Sg300\-10sfp_firmware, Sg300\-20_firmware, Sg300\-28_firmware, Sg300\-28mp_firmware, Sg300\-28p_firmware, Sg300\-28pp_firmware, Sg300\-52_firmware, Sg300\-52mp_firmware, Sg300\-52p_firmware, Sg350\-10_firmware, Sg350\-10mp_firmware, Sg350\-10p_firmware, Sg350\-28_firmware, Sg350\-28mp_firmware, Sg350\-28p_firmware, Sg350x\-24_firmware, Sg350x\-24mp_firmware, Sg350x\-24p_firmware, Sg350x\-48_firmware, Sg350x\-48mp_firmware, Sg350x\-48p_firmware, Sg350xg\-24f_firmware, Sg350xg\-24t_firmware, Sg350xg\-2f10_firmware, Sg350xg\-48t_firmware, Sg355\-10p_firmware, Sg500\-28_firmware, Sg500\-28mpp_firmware, Sg500\-28p_firmware, Sg500\-52_firmware, Sg500\-52mp_firmware, Sg500\-52p_firmware, Sg500x\-24_firmware, Sg500x\-24p_firmware, Sg500x\-48_firmware, Sg500x\-48p_firmware, Sg500xg\-8f8t_firmware, Sg550x\-24_firmware, Sg550x\-24mp_firmware, Sg550x\-24mpp_firmware, Sg550x\-24p_firmware, Sg550x\-48_firmware, Sg550x\-48mp_firmware, Sg550x\-48p_firmware, Sx550x\-12f_firmware, Sx550x\-16ft_firmware, Sx550x\-24_firmware, Sx550x\-24f_firmware, Sx550x\-24ft_firmware, Sx550x\-52_firmware
|
5.3
|
|
|
|
2020-08-26
|
CVE-2020-3496
|
A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. An attacker could exploit this vulnerability by sending a crafted IPv6 packet through an affected device. A successful exploit could allow the attacker to cause the switch management CLI to stop...
|
Sf200\-24_firmware, Sf200\-24fp_firmware, Sf200\-24p_firmware, Sf200\-48_firmware, Sf200\-48p_firmware, Sf250\-24_firmware, Sf250\-24p_firmware, Sf250\-48_firmware, Sf250\-48hp_firmware, Sf300\-08_firmware, Sf300\-24_firmware, Sf300\-24mp_firmware, Sf300\-24p_firmware, Sf300\-24pp_firmware, Sf300\-48_firmware, Sf300\-48p_firmware, Sf300\-48pp_firmware, Sf302\-08_firmware, Sf302\-08mp_firmware, Sf302\-08mpp_firmware, Sf302\-08p_firmware, Sf302\-08pp_firmware, Sf350\-48_firmware, Sf350\-48mp_firmware, Sf350\-48p_firmware, Sf500\-24_firmware, Sf500\-24p_firmware, Sf500\-48_firmware, Sf500\-48p_firmware, Sf550x\-24_firmware, Sf550x\-24mp_firmware, Sf550x\-24p_firmware, Sf550x\-48_firmware, Sf550x\-48mp_firmware, Sf550x\-48p_firmware, Sg200\-08_firmware, Sg200\-08p_firmware, Sg200\-10fp_firmware, Sg200\-18_firmware, Sg200\-26_firmware, Sg200\-26fp_firmware, Sg200\-26p_firmware, Sg200\-50_firmware, Sg200\-50fp_firmware, Sg200\-50p_firmware, Sg250\-08_firmware, Sg250\-08hp_firmware, Sg250\-10p_firmware, Sg250\-18_firmware, Sg250\-26_firmware, Sg250\-26hp_firmware, Sg250\-26p_firmware, Sg250\-50_firmware, Sg250\-50hp_firmware, Sg250\-50p_firmware, Sg250x\-24_firmware, Sg250x\-24p_firmware, Sg250x\-48_firmware, Sg250x\-48p_firmware, Sg300\-10_firmware, Sg300\-10mp_firmware, Sg300\-10mpp_firmware, Sg300\-10p_firmware, Sg300\-10pp_firmware, Sg300\-10sfp_firmware, Sg300\-20_firmware, Sg300\-28_firmware, Sg300\-28mp_firmware, Sg300\-28p_firmware, Sg300\-28pp_firmware, Sg300\-52_firmware, Sg300\-52mp_firmware, Sg300\-52p_firmware, Sg350\-10_firmware, Sg350\-10mp_firmware, Sg350\-10p_firmware, Sg350\-28_firmware, Sg350\-28mp_firmware, Sg350\-28p_firmware, Sg350x\-24_firmware, Sg350x\-24mp_firmware, Sg350x\-24p_firmware, Sg350x\-48_firmware, Sg350x\-48mp_firmware, Sg350x\-48p_firmware, Sg350xg\-24f_firmware, Sg350xg\-24t_firmware, Sg350xg\-2f10_firmware, Sg350xg\-48t_firmware, Sg355\-10p_firmware, Sg500\-28_firmware, Sg500\-28mpp_firmware, Sg500\-28p_firmware, Sg500\-52_firmware, Sg500\-52mp_firmware, Sg500\-52p_firmware, Sg500x\-24_firmware, Sg500x\-24p_firmware, Sg500x\-48_firmware, Sg500x\-48p_firmware, Sg500xg\-8f8t_firmware, Sg550x\-24_firmware, Sg550x\-24mp_firmware, Sg550x\-24mpp_firmware, Sg550x\-24p_firmware, Sg550x\-48_firmware, Sg550x\-48mp_firmware, Sg550x\-48p_firmware, Sx550x\-12f_firmware, Sx550x\-16ft_firmware, Sx550x\-24_firmware, Sx550x\-24f_firmware, Sx550x\-24ft_firmware, Sx550x\-52_firmware
|
5.3
|
|
|
|
2020-08-17
|
CVE-2020-3363
|
A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. An attacker could exploit this vulnerability by sending a crafted IPv6 packet through an affected device. A successful exploit could allow the attacker to cause an unexpected reboot of the switch,...
|
Sf200\-24_firmware, Sf200\-24fp_firmware, Sf200\-24p_firmware, Sf200\-48_firmware, Sf200\-48p_firmware, Sf250\-24_firmware, Sf250\-24p_firmware, Sf250\-48_firmware, Sf250\-48hp_firmware, Sf300\-08_firmware, Sf300\-24_firmware, Sf300\-24mp_firmware, Sf300\-24p_firmware, Sf300\-24pp_firmware, Sf300\-48_firmware, Sf300\-48p_firmware, Sf300\-48pp_firmware, Sf302\-08_firmware, Sf302\-08mp_firmware, Sf302\-08mpp_firmware, Sf302\-08p_firmware, Sf302\-08pp_firmware, Sf350\-48_firmware, Sf350\-48mp_firmware, Sf350\-48p_firmware, Sf500\-24_firmware, Sf500\-24p_firmware, Sf500\-48_firmware, Sf500\-48p_firmware, Sf550x\-24_firmware, Sf550x\-24mp_firmware, Sf550x\-24p_firmware, Sf550x\-48_firmware, Sf550x\-48mp_firmware, Sf550x\-48p_firmware, Sg200\-08_firmware, Sg200\-08p_firmware, Sg200\-10fp_firmware, Sg200\-18_firmware, Sg200\-26_firmware, Sg200\-26fp_firmware, Sg200\-26p_firmware, Sg200\-50_firmware, Sg200\-50fp_firmware, Sg200\-50p_firmware, Sg250\-08_firmware, Sg250\-08hp_firmware, Sg250\-10p_firmware, Sg250\-18_firmware, Sg250\-26_firmware, Sg250\-26hp_firmware, Sg250\-26p_firmware, Sg250\-50_firmware, Sg250\-50hp_firmware, Sg250\-50p_firmware, Sg250x\-24_firmware, Sg250x\-24p_firmware, Sg250x\-48_firmware, Sg250x\-48p_firmware, Sg300\-10_firmware, Sg300\-10mp_firmware, Sg300\-10mpp_firmware, Sg300\-10p_firmware, Sg300\-10pp_firmware, Sg300\-10sfp_firmware, Sg300\-20_firmware, Sg300\-28_firmware, Sg300\-28mp_firmware, Sg300\-28p_firmware, Sg300\-28pp_firmware, Sg300\-52_firmware, Sg300\-52mp_firmware, Sg300\-52p_firmware, Sg350\-10_firmware, Sg350\-10mp_firmware, Sg350\-10p_firmware, Sg350\-28_firmware, Sg350\-28mp_firmware, Sg350\-28p_firmware, Sg350x\-24_firmware, Sg350x\-24mp_firmware, Sg350x\-24p_firmware, Sg350x\-48_firmware, Sg350x\-48mp_firmware, Sg350x\-48p_firmware, Sg350xg\-24f_firmware, Sg350xg\-24t_firmware, Sg350xg\-2f10_firmware, Sg350xg\-48t_firmware, Sg355\-10p_firmware, Sg500\-28_firmware, Sg500\-28mpp_firmware, Sg500\-28p_firmware, Sg500\-52_firmware, Sg500\-52mp_firmware, Sg500\-52p_firmware, Sg500x\-24_firmware, Sg500x\-24p_firmware, Sg500x\-48_firmware, Sg500x\-48p_firmware, Sg500xg\-8f8t_firmware, Sg550x\-24_firmware, Sg550x\-24mp_firmware, Sg550x\-24mpp_firmware, Sg550x\-24p_firmware, Sg550x\-48_firmware, Sg550x\-48mp_firmware, Sg550x\-48p_firmware, Sx550x\-12f_firmware, Sx550x\-16ft_firmware, Sx550x\-24_firmware, Sx550x\-24f_firmware, Sx550x\-24ft_firmware, Sx550x\-52_firmware
|
8.6
|
|
|
|
2019-05-03
|
CVE-2019-1859
|
A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to bypass client-side certificate authentication and revert to password authentication. The vulnerability exists because OpenSSH mishandles the authentication process. An attacker could exploit this vulnerability by attempting to connect to the device via SSH. A successful exploit could allow the attacker to access the configuration as an administrative user if...
|
Sf200\-24_firmware, Sf200\-24fp_firmware, Sf200\-24p_firmware, Sf200\-48_firmware, Sf200\-48p_firmware, Sf250\-24_firmware, Sf250\-24p_firmware, Sf250\-48_firmware, Sf250\-48hp_firmware, Sf300\-08_firmware, Sf300\-24_firmware, Sf300\-24mp_firmware, Sf300\-24p_firmware, Sf300\-24pp_firmware, Sf300\-48_firmware, Sf300\-48p_firmware, Sf300\-48pp_firmware, Sf302\-08_firmware, Sf302\-08mp_firmware, Sf302\-08mpp_firmware, Sf302\-08p_firmware, Sf302\-08pp_firmware, Sf350\-48_firmware, Sf350\-48mp_firmware, Sf350\-48p_firmware, Sf500\-24_firmware, Sf500\-24p_firmware, Sf500\-48_firmware, Sf500\-48p_firmware, Sf550x\-24_firmware, Sf550x\-24mp_firmware, Sf550x\-24p_firmware, Sf550x\-48_firmware, Sf550x\-48mp_firmware, Sf550x\-48p_firmware, Sg200\-08_firmware, Sg200\-08p_firmware, Sg200\-10fp_firmware, Sg200\-18_firmware, Sg200\-26_firmware, Sg200\-26fp_firmware, Sg200\-26p_firmware, Sg200\-50_firmware, Sg200\-50fp_firmware, Sg200\-50p_firmware, Sg250\-08_firmware, Sg250\-08hp_firmware, Sg250\-10p_firmware, Sg250\-18_firmware, Sg250\-26_firmware, Sg250\-26hp_firmware, Sg250\-26p_firmware, Sg250\-50_firmware, Sg250\-50hp_firmware, Sg250\-50p_firmware, Sg250x\-24_firmware, Sg250x\-24p_firmware, Sg250x\-48_firmware, Sg250x\-48p_firmware, Sg300\-10_firmware, Sg300\-10mp_firmware, Sg300\-10mpp_firmware, Sg300\-10p_firmware, Sg300\-10pp_firmware, Sg300\-10sfp_firmware, Sg300\-20_firmware, Sg300\-28_firmware, Sg300\-28mp_firmware, Sg300\-28p_firmware, Sg300\-28pp_firmware, Sg300\-52_firmware, Sg300\-52mp_firmware, Sg300\-52p_firmware, Sg350\-10_firmware, Sg350\-10mp_firmware, Sg350\-10p_firmware, Sg350\-28_firmware, Sg350\-28mp_firmware, Sg350\-28p_firmware, Sg350x\-24_firmware, Sg350x\-24mp_firmware, Sg350x\-24p_firmware, Sg350x\-48_firmware, Sg350x\-48mp_firmware, Sg350x\-48p_firmware, Sg350xg\-24f_firmware, Sg350xg\-24t_firmware, Sg350xg\-2f10_firmware, Sg350xg\-48t_firmware, Sg355\-10p_firmware, Sg500\-28_firmware, Sg500\-28mpp_firmware, Sg500\-28p_firmware, Sg500\-52_firmware, Sg500\-52mp_firmware, Sg500\-52p_firmware, Sg500x\-24_firmware, Sg500x\-24p_firmware, Sg500x\-48_firmware, Sg500x\-48p_firmware, Sg500xg\-8f8t_firmware, Sg550x\-24_firmware, Sg550x\-24mp_firmware, Sg550x\-24mpp_firmware, Sg550x\-24p_firmware, Sg550x\-48_firmware, Sg550x\-48mp_firmware, Sg550x\-48p_firmware, Sx550x\-12f_firmware, Sx550x\-16ft_firmware, Sx550x\-24_firmware, Sx550x\-24f_firmware, Sx550x\-24ft_firmware, Sx550x\-52_firmware
|
7.2
|
|
|
|
2017-09-21
|
CVE-2017-6720
|
A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of SSH connections. An attacker could exploit this vulnerability by logging in to an affected switch via SSH and sending a malicious SSH message. This vulnerability affects the following Cisco products when...
|
Esw2\-350g\-52_firmware, Esw2\-350g\-52dc_firmware, Esw2\-550x\-48_firmware, Esw2\-550x\-48dc_firmware, Sf300\-08_firmware, Sf300\-24_firmware, Sf300\-24mp_firmware, Sf300\-24p_firmware, Sf300\-24pp_firmware, Sf300\-48_firmware, Sf300\-48p_firmware, Sf300\-48pp_firmware, Sf302\-08_firmware, Sf302\-08mp_firmware, Sf302\-08mpp_firmware, Sf302\-08p_firmware, Sf302\-08pp_firmware, Sf350\-48_firmware, Sf350\-48mp_firmware, Sf350\-48p_firmware, Sf500\-24_firmware, Sf500\-24p_firmware, Sf500\-48_firmware, Sf500\-48p_firmware, Sf550x\-24_firmware, Sf550x\-24mp_firmware, Sf550x\-24p_firmware, Sf550x\-48_firmware, Sf550x\-48mp_firmware, Sf550x\-48p_firmware, Sg300\-10_firmware, Sg300\-10mp_firmware, Sg300\-10mpp_firmware, Sg300\-10p_firmware, Sg300\-10pp_firmware, Sg300\-10sfp_firmware, Sg300\-20_firmware, Sg300\-28_firmware, Sg300\-28mp_firmware, Sg300\-28p_firmware, Sg300\-28pp_firmware, Sg300\-52_firmware, Sg300\-52mp_firmware, Sg300\-52p_firmware, Sg350\-10_firmware, Sg350\-10mp_firmware, Sg350\-10p_firmware, Sg350\-28_firmware, Sg350\-28mp_firmware, Sg350\-28p_firmware, Sg350x\-24_firmware, Sg350x\-24mp_firmware, Sg350x\-24p_firmware, Sg350x\-48_firmware, Sg350x\-48mp_firmware, Sg350x\-48p_firmware, Sg350xg\-24f_firmware, Sg350xg\-24t_firmware, Sg350xg\-2f10_firmware, Sg350xg\-48t_firmware, Sg355\-10p_firmware, Sg500\-28_firmware, Sg500\-28mpp_firmware, Sg500\-28p_firmware, Sg500\-52_firmware, Sg500\-52mp_firmware, Sg500\-52p_firmware, Sg500x\-24_firmware, Sg500x\-24p_firmware, Sg500x\-48_firmware, Sg500x\-48p_firmware, Sg500xg\-8f8t_firmware, Sg550x\-24_firmware, Sg550x\-24mp_firmware, Sg550x\-24mpp_firmware, Sg550x\-24p_firmware, Sg550x\-48_firmware, Sg550x\-48mp_firmware, Sg550x\-48p_firmware, Sx550x\-12f_firmware, Sx550x\-16ft_firmware, Sx550x\-24_firmware, Sx550x\-24f_firmware, Sx550x\-24ft_firmware, Sx550x\-52_firmware
|
N/A
|
|
|
|
2018-01-18
|
CVE-2017-12308
|
A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user...
|
Esw2\-350g\-52_firmware, Esw2\-350g\-52dc_firmware, Esw2\-550x\-48_firmware, Esw2\-550x\-48dc_firmware, Sf300\-08_firmware, Sf300\-24_firmware, Sf300\-24mp_firmware, Sf300\-24p_firmware, Sf300\-24pp_firmware, Sf300\-48_firmware, Sf300\-48p_firmware, Sf300\-48pp_firmware, Sf302\-08_firmware, Sf302\-08mp_firmware, Sf302\-08mpp_firmware, Sf302\-08p_firmware, Sf302\-08pp_firmware, Sf350\-48_firmware, Sf350\-48mp_firmware, Sf350\-48p_firmware, Sf500\-24_firmware, Sf500\-24p_firmware, Sf500\-48_firmware, Sf500\-48p_firmware, Sf550x\-24_firmware, Sf550x\-24mp_firmware, Sf550x\-24p_firmware, Sf550x\-48_firmware, Sf550x\-48mp_firmware, Sf550x\-48p_firmware, Sg300\-10_firmware, Sg300\-10mp_firmware, Sg300\-10mpp_firmware, Sg300\-10p_firmware, Sg300\-10pp_firmware, Sg300\-10sfp_firmware, Sg300\-20_firmware, Sg300\-28_firmware, Sg300\-28mp_firmware, Sg300\-28p_firmware, Sg300\-28pp_firmware, Sg300\-52_firmware, Sg300\-52mp_firmware, Sg300\-52p_firmware, Sg350\-10_firmware, Sg350\-10mp_firmware, Sg350\-10p_firmware, Sg350\-28_firmware, Sg350\-28mp_firmware, Sg350\-28p_firmware, Sg350x\-24_firmware, Sg350x\-24mp_firmware, Sg350x\-24p_firmware, Sg350x\-48_firmware, Sg350x\-48mp_firmware, Sg350x\-48p_firmware, Sg350xg\-24f_firmware, Sg350xg\-24t_firmware, Sg350xg\-2f10_firmware, Sg350xg\-48t_firmware, Sg355\-10p_firmware, Sg500\-28_firmware, Sg500\-28mpp_firmware, Sg500\-28p_firmware, Sg500\-52_firmware, Sg500\-52mp_firmware, Sg500\-52p_firmware, Sg500x\-24_firmware, Sg500x\-24p_firmware, Sg500x\-48_firmware, Sg500x\-48p_firmware, Sg500xg\-8f8t_firmware, Sg550x\-24_firmware, Sg550x\-24mp_firmware, Sg550x\-24mpp_firmware, Sg550x\-24p_firmware, Sg550x\-48_firmware, Sg550x\-48mp_firmware, Sg550x\-48p_firmware, Sx550x\-12f_firmware, Sx550x\-16ft_firmware, Sx550x\-24_firmware, Sx550x\-24f_firmware, Sx550x\-24ft_firmware, Sx550x\-52_firmware
|
N/A
|
|
|
|
2018-01-18
|
CVE-2017-12307
|
A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting and...
|
Esw2\-350g\-52_firmware, Esw2\-350g\-52dc_firmware, Esw2\-550x\-48_firmware, Esw2\-550x\-48dc_firmware, Sf300\-08_firmware, Sf300\-24_firmware, Sf300\-24mp_firmware, Sf300\-24p_firmware, Sf300\-24pp_firmware, Sf300\-48_firmware, Sf300\-48p_firmware, Sf300\-48pp_firmware, Sf302\-08_firmware, Sf302\-08mp_firmware, Sf302\-08mpp_firmware, Sf302\-08p_firmware, Sf302\-08pp_firmware, Sf350\-48_firmware, Sf350\-48mp_firmware, Sf350\-48p_firmware, Sf500\-24_firmware, Sf500\-24p_firmware, Sf500\-48_firmware, Sf500\-48p_firmware, Sf550x\-24_firmware, Sf550x\-24mp_firmware, Sf550x\-24p_firmware, Sf550x\-48_firmware, Sf550x\-48mp_firmware, Sf550x\-48p_firmware, Sg300\-10_firmware, Sg300\-10mp_firmware, Sg300\-10mpp_firmware, Sg300\-10p_firmware, Sg300\-10pp_firmware, Sg300\-10sfp_firmware, Sg300\-20_firmware, Sg300\-28_firmware, Sg300\-28mp_firmware, Sg300\-28p_firmware, Sg300\-28pp_firmware, Sg300\-52_firmware, Sg300\-52mp_firmware, Sg300\-52p_firmware, Sg350\-10_firmware, Sg350\-10mp_firmware, Sg350\-10p_firmware, Sg350\-28_firmware, Sg350\-28mp_firmware, Sg350\-28p_firmware, Sg350x\-24_firmware, Sg350x\-24mp_firmware, Sg350x\-24p_firmware, Sg350x\-48_firmware, Sg350x\-48mp_firmware, Sg350x\-48p_firmware, Sg350xg\-24f_firmware, Sg350xg\-24t_firmware, Sg350xg\-2f10_firmware, Sg350xg\-48t_firmware, Sg355\-10p_firmware, Sg500\-28_firmware, Sg500\-28mpp_firmware, Sg500\-28p_firmware, Sg500\-52_firmware, Sg500\-52mp_firmware, Sg500\-52p_firmware, Sg500x\-24_firmware, Sg500x\-24p_firmware, Sg500x\-48_firmware, Sg500x\-48p_firmware, Sg500xg\-8f8t_firmware, Sg550x\-24_firmware, Sg550x\-24mp_firmware, Sg550x\-24mpp_firmware, Sg550x\-24p_firmware, Sg550x\-48_firmware, Sg550x\-48mp_firmware, Sg550x\-48p_firmware, Sx550x\-12f_firmware, Sx550x\-16ft_firmware, Sx550x\-24_firmware, Sx550x\-24f_firmware, Sx550x\-24ft_firmware, Sx550x\-52_firmware
|
N/A
|
|
|
|
2018-11-08
|
CVE-2018-15439
|
A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under specific circumstances, the affected software enables a privileged user account without notifying administrators of the system. An attacker could exploit this vulnerability by using this account to log in to an affected device and execute commands with full admin rights. Cisco...
|
Sf200\-24_firmware, Sf200\-24fp_firmware, Sf200\-24p_firmware, Sf200\-48_firmware, Sf200\-48p_firmware, Sf250\-24_firmware, Sf250\-24p_firmware, Sf250\-48_firmware, Sf250\-48hp_firmware, Sf300\-08_firmware, Sf300\-24_firmware, Sf300\-24mp_firmware, Sf300\-24p_firmware, Sf300\-24pp_firmware, Sf300\-48_firmware, Sf300\-48p_firmware, Sf300\-48pp_firmware, Sf302\-08_firmware, Sf302\-08mp_firmware, Sf302\-08mpp_firmware, Sf302\-08p_firmware, Sf302\-08pp_firmware, Sf350\-48_firmware, Sf350\-48mp_firmware, Sf350\-48p_firmware, Sf500\-24_firmware, Sf500\-24p_firmware, Sf500\-48_firmware, Sf500\-48p_firmware, Sf550x\-24_firmware, Sf550x\-24mp_firmware, Sf550x\-24p_firmware, Sf550x\-48_firmware, Sf550x\-48mp_firmware, Sf550x\-48p_firmware, Sg200\-08_firmware, Sg200\-08p_firmware, Sg200\-10fp_firmware, Sg200\-18_firmware, Sg200\-26_firmware, Sg200\-26fp_firmware, Sg200\-26p_firmware, Sg200\-50_firmware, Sg200\-50fp_firmware, Sg200\-50p_firmware, Sg250\-08_firmware, Sg250\-08hp_firmware, Sg250\-10p_firmware, Sg250\-18_firmware, Sg250\-26_firmware, Sg250\-26hp_firmware, Sg250\-26p_firmware, Sg250\-50_firmware, Sg250\-50hp_firmware, Sg250\-50p_firmware, Sg250x\-24_firmware, Sg250x\-24p_firmware, Sg250x\-48_firmware, Sg250x\-48p_firmware, Sg300\-10_firmware, Sg300\-10mp_firmware, Sg300\-10mpp_firmware, Sg300\-10p_firmware, Sg300\-10pp_firmware, Sg300\-10sfp_firmware, Sg300\-20_firmware, Sg300\-28_firmware, Sg300\-28mp_firmware, Sg300\-28p_firmware, Sg300\-28pp_firmware, Sg300\-52_firmware, Sg300\-52mp_firmware, Sg300\-52p_firmware, Sg350\-10_firmware, Sg350\-10mp_firmware, Sg350\-10p_firmware, Sg350\-28_firmware, Sg350\-28mp_firmware, Sg350\-28p_firmware, Sg350x\-24_firmware, Sg350x\-24mp_firmware, Sg350x\-24p_firmware, Sg350x\-48_firmware, Sg350x\-48mp_firmware, Sg350x\-48p_firmware, Sg350xg\-24f_firmware, Sg350xg\-24t_firmware, Sg350xg\-2f10_firmware, Sg350xg\-48t_firmware, Sg355\-10p_firmware, Sg500\-28_firmware, Sg500\-28mpp_firmware, Sg500\-28p_firmware, Sg500\-52_firmware, Sg500\-52mp_firmware, Sg500\-52p_firmware, Sg500x\-24_firmware, Sg500x\-24p_firmware, Sg500x\-48_firmware, Sg500x\-48p_firmware, Sg500xg\-8f8t_firmware, Sg550x\-24_firmware, Sg550x\-24mp_firmware, Sg550x\-24mpp_firmware, Sg550x\-24p_firmware, Sg550x\-48_firmware, Sg550x\-48mp_firmware, Sg550x\-48p_firmware, Sx550x\-12f_firmware, Sx550x\-16ft_firmware, Sx550x\-24_firmware, Sx550x\-24f_firmware, Sx550x\-24ft_firmware, Sx550x\-52_firmware
|
N/A
|
|
|
|
2020-07-02
|
CVE-2020-3297
|
A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to defeat authentication protections and gain unauthorized access to the management interface. The attacker could obtain the privileges of the highjacked session account, which could include administrator privileges on the device. The vulnerability is due to the use of weak entropy generation for session identifier values. An...
|
Sf200\-24_firmware, Sf200\-24fp_firmware, Sf200\-24p_firmware, Sf200\-48_firmware, Sf200\-48p_firmware, Sf200e\-24_firmware, Sf200e\-24p_firmware, Sf200e\-48_firmware, Sf200e\-48p_firmware, Sf250\-24_firmware, Sf250\-24p_firmware, Sf250\-48_firmware, Sf250\-48hp_firmware, Sf300\-08_firmware, Sf300\-24_firmware, Sf300\-24mp_firmware, Sf300\-24p_firmware, Sf300\-24pp_firmware, Sf300\-48_firmware, Sf300\-48p_firmware, Sf300\-48pp_firmware, Sf302\-08_firmware, Sf302\-08mp_firmware, Sf302\-08mpp_firmware, Sf302\-08p_firmware, Sf302\-08pp_firmware, Sf350\-48_firmware, Sf350\-48mp_firmware, Sf350\-48p_firmware, Sf500\-24_firmware, Sf500\-24p_firmware, Sf500\-48_firmware, Sf500\-48p_firmware, Sf550x\-24_firmware, Sf550x\-24mp_firmware, Sf550x\-24p_firmware, Sf550x\-48_firmware, Sf550x\-48mp_firmware, Sf550x\-48p_firmware, Sg200\-08_firmware, Sg200\-08p_firmware, Sg200\-10fp_firmware, Sg200\-18_firmware, Sg200\-26_firmware, Sg200\-26fp_firmware, Sg200\-26p_firmware, Sg200\-50_firmware, Sg200\-50fp_firmware, Sg200\-50p_firmware, Sg250\-08_firmware, Sg250\-08hp_firmware, Sg250\-10p_firmware, Sg250\-18_firmware, Sg250\-26_firmware, Sg250\-26hp_firmware, Sg250\-26p_firmware, Sg250\-50_firmware, Sg250\-50hp_firmware, Sg250\-50p_firmware, Sg250x\-24_firmware, Sg250x\-24p_firmware, Sg250x\-48_firmware, Sg250x\-48p_firmware, Sg300\-10_firmware, Sg300\-10mp_firmware, Sg300\-10mpp_firmware, Sg300\-10p_firmware, Sg300\-10pp_firmware, Sg300\-10sfp_firmware, Sg300\-20_firmware, Sg300\-28_firmware, Sg300\-28mp_firmware, Sg300\-28p_firmware, Sg300\-28pp_firmware, Sg300\-52_firmware, Sg300\-52mp_firmware, Sg300\-52p_firmware, Sg350\-10_firmware, Sg350\-10mp_firmware, Sg350\-10p_firmware, Sg350\-28_firmware, Sg350\-28mp_firmware, Sg350\-28p_firmware, Sg350x\-24_firmware, Sg350x\-24mp_firmware, Sg350x\-24p_firmware, Sg350x\-48_firmware, Sg350x\-48mp_firmware, Sg350x\-48p_firmware, Sg350xg\-24f_firmware, Sg350xg\-24t_firmware, Sg350xg\-2f10_firmware, Sg350xg\-48t_firmware, Sg355\-10p_firmware, Sg500\-28_firmware, Sg500\-28mpp_firmware, Sg500\-28p_firmware, Sg500\-52_firmware, Sg500\-52mp_firmware, Sg500\-52p_firmware, Sg500x\-24_firmware, Sg500x\-24p_firmware, Sg500x\-48_firmware, Sg500x\-48p_firmware, Sg500xg\-8f8t_firmware, Sg550x\-24_firmware, Sg550x\-24mp_firmware, Sg550x\-24mpp_firmware, Sg550x\-24p_firmware, Sg550x\-48_firmware, Sg550x\-48mp_firmware, Sg550x\-48p_firmware, Sx550x\-12f_firmware, Sx550x\-16ft_firmware, Sx550x\-24_firmware, Sx550x\-24f_firmware, Sx550x\-24ft_firmware, Sx550x\-52_firmware
|
N/A
|
|
|