Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

32 records in Sf300-08 Firmware · all components

Priority HIGH 80

A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.49742 Published 2018-11-08 No fix listed CWE-798
Priority MEDIUM 62

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11996 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 61

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11114 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 61

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11114 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 61

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11114 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 51

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01506 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 51

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01506 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 51

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01506 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 51

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01506 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 48

A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to defeat authentication protections and gain unauthori…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03043 Published 2020-07-02 No fix listed CWE-287
Priority MEDIUM 47

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01819 Published 2020-08-17 No fix listed CWE-20
Priority MEDIUM 46

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01579 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 43

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0228 Published 2020-01-29 Fixed in 1.3.7.18 CWE-20
Priority MEDIUM 43

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.1027 Published 2020-09-23 No fix listed CWE-16
Priority MEDIUM 42

A vulnerability in the Secure Sockets Layer (SSL) input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a memory corruption on a…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01772 Published 2019-07-06 Fixed in 1.4.10.6 CWE-119
Priority MEDIUM 42

A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01772 Published 2019-07-06 Fixed in 1.4.10.6 CWE-20
Priority MEDIUM 41

A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0167 Published 2021-11-04 No fix listed CWE-613
Priority MEDIUM 41

A vulnerability in the interactions between the DHCP and TFTP features for Cisco Small Business 300 Series (Sx300) Managed Switches could allow an unauthenticated, remote attacker to cause the device to become low on sys…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02125 Published 2019-05-15 No fix listed CWE-400
Priority LOW 39

A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.09687 Published 2019-07-17 No fix listed CWE-601
Priority LOW 38

A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Small Business Sx200, Sx300, Sx500, ESW2 Series Managed Switches and Small Business Sx250, Sx350, Sx550 Series Switches cou…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.02046 Published 2019-05-15 Fixed in 1.4.10.6, 2.5.0.78 CWE-20
Priority LOW 35

A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to bypass client-side certificate authentication and revert to password authentication.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00839 Published 2019-05-03 Fixed in 1.4.10.6, 2.5.0.78 CWE-285
Priority LOW 34

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01737 Published 2020-08-26 No fix listed CWE-20
Priority LOW 33

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches co…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01281 Published 2021-11-04 No fix listed CWE-20
Priority LOW 32

A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of servi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01395 Published 2017-09-21 No fix listed CWE-119
Load more
Open these records in search →