Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 10

Export CSV
CVE-2023-20189

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 12.0% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2023-20162

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 1.5% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2023-20161

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 11.1% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2023-20160

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 11.1% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2023-20159

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 11.1% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2023-20158

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 1.5% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2023-20157

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 1.5% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2023-20156

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 1.5% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2023-20024

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS 3.1 · 8.6 High EPSS 1.6% KEV · Not listed
Vendors
Cisco
Products
250 Series Smart Switches Firmware 350 Series Managed Switches Firmware 350x Series Stackable Managed Switches Firmware and 464 more
CVE-2021-34739

Cisco Small Business Series Switches Session Credentials Replay Vulnerability

A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges.

CVSS 3.1 · 8.1 High EPSS 1.7% KEV · Not listed
Vendors
Cisco
Products
Cbs250-16p-2g Cbs250-16p-2g Firmware Cbs250-16t-2g and 415 more