Priority MEDIUM 62
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.11996 · Published 2023-05-18 · No fix listed CWE-120
Priority MEDIUM 51
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01506 · Published 2023-05-18 · No fix listed CWE-120
Priority MEDIUM 61
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.11114 · Published 2023-05-18 · No fix listed CWE-120
Priority MEDIUM 61
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.11114 · Published 2023-05-18 · No fix listed CWE-120
Priority MEDIUM 61
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.11114 · Published 2023-05-18 · No fix listed CWE-120
Priority MEDIUM 51
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01506 · Published 2023-05-18 · No fix listed CWE-120
Priority MEDIUM 51
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01506 · Published 2023-05-18 · No fix listed CWE-120
Priority MEDIUM 51
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01506 · Published 2023-05-18 · No fix listed CWE-120
Priority MEDIUM 46
Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary c…
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01579 · Published 2023-05-18 · No fix listed CWE-120
Priority MEDIUM 41
A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.0167 · Published 2021-11-04 · No fix listed CWE-613
Priority MEDIUM 43
A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.1027 · Published 2020-09-23 · No fix listed CWE-16
Priority LOW 34
A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01737 · Published 2020-08-26 · No fix listed CWE-20
Priority MEDIUM 47
A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.01819 · Published 2020-08-17 · No fix listed CWE-20
Priority MEDIUM 48
A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to defeat authentication protections and gain unauthori…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03043 · Published 2020-07-02 · No fix listed CWE-287
Priority LOW 29
A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of th…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01066 · Published 2020-01-26 · No fix listed CWE-79
Priority LOW 29
A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00801 · Published 2019-10-16 · No fix listed CWE-79
Priority LOW 39
A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affecte…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00645 · Published 2019-10-16 · No fix listed CWE-352
Priority LOW 38
A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Small Business Sx200, Sx300, Sx500, ESW2 Series Managed Switches and Small Business Sx250, Sx350, Sx550 Series Switches cou…
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.02046 · Published 2019-05-15 · Fixed in 1.4.10.6, 2.5.0.78 CWE-20
Priority LOW 35
A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to bypass client-side certificate authentication and revert to password authentication.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00839 · Published 2019-05-03 · Fixed in 1.4.10.6, 2.5.0.78 CWE-285
Priority HIGH 80
A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.49742 · Published 2018-11-08 · No fix listed CWE-798
Priority LOW 29
A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of a…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00833 · Published 2018-01-18 · No fix listed CWE-113
Priority LOW 29
A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web in…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00871 · Published 2018-01-18 · No fix listed CWE-79
Priority LOW 32
A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of servi…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01395 · Published 2017-09-21 · No fix listed CWE-119