5
CVSSv2

CVE-2016-1472

Published: 02/09/2016 Updated: 13/08/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

The web-based management interface on Cisco Small Business 220 devices with firmware prior to 1.0.1.1 allows remote malicious users to cause a denial of service (interface outage) via a crafted HTTP request, aka Bug ID CSCuz76238.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

cisco small business 220 series smart plus switches 1.0.0.19

cisco small business 220 series smart plus switches 1.0.0.17

cisco small business 220 series smart plus switches 1.0.0.18

Vendor Advisories

A vulnerability in the web-based management interface of Cisco Small Business 220 Series Smart Plus (Sx220) Switches could allow an unauthenticated, remote attacker to cause the web-based management interface of an affected device to stop responding, resulting in a partial denial of service (DoS) condition on the device The vulnerability is due t ...