Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 11

Export CSV
CVE-2023-20189

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 12.0% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2023-20162

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 1.5% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2023-20161

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 11.1% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2023-20160

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 11.1% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2023-20159

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 11.1% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2023-20158

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 1.5% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2023-20157

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 1.5% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2023-20156

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 1.5% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2023-20024

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 1.6% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2021-40127

Cisco Small Business 200, 300, and 500 Series Switches Web-Based Management Interface Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series Stackable Managed Switches could allow an unauthenticated, remote attacker to render the web-based management interface unusable, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to cause a permanent invalid redirect for requests sent to the web-based management interface of the device, resulting in a DoS condition.

CVSS 3.1 · 5.3 Medium EPSS 1.3% KEV · Not listed
Vendors
Cisco
Products
Sf200-24 Sf200-24 Firmware Sf200-24fp and 129 more
CVE-2020-3297

Cisco Small Business Smart and Managed Switches Session Management Vulnerability

A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to defeat authentication protections and gain unauthorized access to the management interface. The attacker could obtain the privileges of the highjacked session account, which could include administrator privileges on the device. The vulnerability is due to the use of weak entropy generation for session identifier values. An attacker could exploit this vulnerability to determine a current session identifier through brute force and reuse that session identifier to take over an ongoing session. In this way, an attacker could take actions within the management interface with privileges up to the level of the administrative user.

CVSS 3.1 · 9.8 Critical EPSS 3.0% KEV · Not listed
Vendors
Cisco
Products
Sf200-24 Sf200-24 Firmware Sf200-24fp and 233 more