small business switches vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

Cross-site request forgery (CSRF) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware prior to 1.0.1.1 allows remote malicious users to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230.

Cisco Small Business 220 Series Smart Plus Switches 1.0.0.19 Cisco Small Business 220 Series Smart Plus Switches 1.0.0.17 Cisco Small Business 220 Series Smart Plus Switches 1.0.0.18

4.3

CVSSv2

Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware prior to 1.0.1.1 allows remote malicious users to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232.

Cisco Small Business 220 Series Smart Plus Switches 1.0.0.19 Cisco Small Business 220 Series Smart Plus Switches 1.0.0.17 Cisco Small Business 220 Series Smart Plus Switches 1.0.0.18

5

CVSSv2

The web-based management interface on Cisco Small Business 220 devices with firmware prior to 1.0.1.1 allows remote malicious users to cause a denial of service (interface outage) via a crafted HTTP request, aka Bug ID CSCuz76238.

Cisco Small Business 220 Series Smart Plus Switches 1.0.0.19 Cisco Small Business 220 Series Smart Plus Switches 1.0.0.17 Cisco Small Business 220 Series Smart Plus Switches 1.0.0.18

10

CVSSv2

Cisco Small Business 220 devices with firmware prior to 1.0.1.1 have a hardcoded SNMP community, which allows remote malicious users to read or modify SNMP objects by leveraging knowledge of this community, aka Bug ID CSCuz76216.

Cisco Small Business 220 Series Smart Plus Switches 1.0.0.19 Cisco Small Business 220 Series Smart Plus Switches 1.0.0.17 Cisco Small Business 220 Series Smart Plus Switches 1.0.0.18

7.8

CVSSv2

The web GUI on Cisco Small Business 500 devices 1.2.0.92 allows remote malicious users to cause a denial of service via a crafted HTTP request, aka Bug ID CSCul65330.

Cisco 500 Series Switch Firmware 1.2.0.92

5

CVSSv2

The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote malicious users to cause a denial of service (HTTPS outage) via crafted HTTPS requests, aka Bug ID CSCuw87174.

Cisco 300 Series Managed Switch Firmware 1.4.1

2.9

CVSSv2

Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly ...

Cisco Business 220-8t-e-2g Firmware Cisco Business 220-8p-e-2g Firmware Cisco Business 220-8fp-e-2g Firmware Cisco Business 220-16t-2g Firmware Cisco Business 220-16p-2g Firmware Cisco Business 220-24t-4g Firmware Cisco Business 220-24p-4g Firmware Cisco Business 220-24fp-4g Firmware Cisco Business 220-48t-4g Firmware Cisco Business 220-48p-4g Firmware Cisco Business 220-24t-4x Firmware Cisco Business 220-24p-4x Firmware Cisco Business 220-24fp-4x Firmware Cisco Business 220-48t-4x Firmware Cisco Business 220-48p-4x Firmware Cisco Business 220-48fp-4x Firmware

2.9

CVSSv2

Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly ...

Cisco Business 220-8t-e-2g Firmware Cisco Business 220-8p-e-2g Firmware Cisco Business 220-8fp-e-2g Firmware Cisco Business 220-16t-2g Firmware Cisco Business 220-16p-2g Firmware Cisco Business 220-24t-4g Firmware Cisco Business 220-24p-4g Firmware Cisco Business 220-24fp-4g Firmware Cisco Business 220-48t-4g Firmware Cisco Business 220-48p-4g Firmware Cisco Business 220-24t-4x Firmware Cisco Business 220-24p-4x Firmware Cisco Business 220-24fp-4x Firmware Cisco Business 220-48t-4x Firmware Cisco Business 220-48p-4x Firmware Cisco Business 220-48fp-4x Firmware

2.9

CVSSv2

Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly ...

Cisco Business 220-8t-e-2g Firmware Cisco Business 220-8p-e-2g Firmware Cisco Business 220-8fp-e-2g Firmware Cisco Business 220-16t-2g Firmware Cisco Business 220-16p-2g Firmware Cisco Business 220-24t-4g Firmware Cisco Business 220-24p-4g Firmware Cisco Business 220-24fp-4g Firmware Cisco Business 220-48t-4g Firmware Cisco Business 220-48p-4g Firmware Cisco Business 220-24t-4x Firmware Cisco Business 220-24p-4x Firmware Cisco Business 220-24fp-4x Firmware Cisco Business 220-48t-4x Firmware Cisco Business 220-48p-4x Firmware Cisco Business 220-48fp-4x Firmware

2.9

CVSSv2

Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly ...

Cisco Business 220-8t-e-2g Firmware Cisco Business 220-8p-e-2g Firmware Cisco Business 220-8fp-e-2g Firmware Cisco Business 220-16t-2g Firmware Cisco Business 220-16p-2g Firmware Cisco Business 220-24t-4g Firmware Cisco Business 220-24p-4g Firmware Cisco Business 220-24fp-4g Firmware Cisco Business 220-48t-4g Firmware Cisco Business 220-48p-4g Firmware Cisco Business 220-24t-4x Firmware Cisco Business 220-24p-4x Firmware Cisco Business 220-24fp-4x Firmware Cisco Business 220-48t-4x Firmware Cisco Business 220-48p-4x Firmware Cisco Business 220-48fp-4x Firmware

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook