Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

23 records in Sf350-48 Firmware · all components

Priority HIGH 80

A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.49742 Published 2018-11-08 No fix listed CWE-798
Priority MEDIUM 62

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11996 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 61

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11114 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 61

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11114 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 61

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11114 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 51

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01506 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 51

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01506 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 51

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01506 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 51

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01506 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 48

A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to defeat authentication protections and gain unauthori…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03043 Published 2020-07-02 No fix listed CWE-287
Priority MEDIUM 47

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01819 Published 2020-08-17 No fix listed CWE-20
Priority MEDIUM 46

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01579 Published 2023-05-18 No fix listed CWE-120
Priority MEDIUM 43

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.1027 Published 2020-09-23 No fix listed CWE-16
Priority MEDIUM 41

A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0167 Published 2021-11-04 No fix listed CWE-613
Priority LOW 38

A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Small Business Sx200, Sx300, Sx500, ESW2 Series Managed Switches and Small Business Sx250, Sx350, Sx550 Series Switches cou…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.02046 Published 2019-05-15 Fixed in 1.4.10.6, 2.5.0.78 CWE-20
Priority LOW 35

A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to bypass client-side certificate authentication and revert to password authentication.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00839 Published 2019-05-03 Fixed in 1.4.10.6, 2.5.0.78 CWE-285
Priority LOW 34

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01737 Published 2020-08-26 No fix listed CWE-20
Priority LOW 32

A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of servi…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01395 Published 2017-09-21 No fix listed CWE-119
Priority LOW 29

A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of th…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01066 Published 2020-01-26 No fix listed CWE-79
Priority LOW 29

A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00801 Published 2019-10-16 No fix listed CWE-79
Priority LOW 29

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00833 Published 2018-01-18 No fix listed CWE-113
Priority LOW 29

A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web in…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00871 Published 2018-01-18 No fix listed CWE-79
Open these records in search →