Cisco
Cisco Sg350-10 Firmware: vulnerabilidades y CVE
Cisco Sg350-10 Firmware tiene 22 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 10 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE22
Últimos 12 meses0
Críticas10
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2023-20189 | Crítica (9.8) | 11% | — | 18 may 2023 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary… |
| CVE-2023-20162 | Crítica (9.8) | 1.2% | — | 18 may 2023 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary… |
| CVE-2023-20161 | Crítica (9.8) | 10% | — | 18 may 2023 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary… |
| CVE-2023-20160 | Crítica (9.8) | 10% | — | 18 may 2023 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary… |
| CVE-2023-20159 | Crítica (9.8) | 10% | — | 18 may 2023 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary… |
| CVE-2023-20158 | Crítica (9.8) | 1.2% | — | 18 may 2023 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary… |
| CVE-2023-20157 | Crítica (9.8) | 1.2% | — | 18 may 2023 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary… |
| CVE-2023-20156 | Crítica (9.8) | 1.2% | — | 18 may 2023 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary… |
| CVE-2023-20024 | Alta (7.5) | 1.3% | — | 18 may 2023 | Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary… |
| CVE-2019-15993 | Media (5.3) | 10% | — | 23 sept 2020 | A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper… |
| CVE-2020-3496 | Media (5.3) | 1.7% | — | 26 ago 2020 | A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.… |
| CVE-2020-3363 | Alta (8.6) | 1.8% | — | 17 ago 2020 | A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.… |
| CVE-2020-3297 | Crítica (9.8) | 3.0% | — | 2 jul 2020 | A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to defeat authentication protections and gain… |
| CVE-2020-3121 | Media (6.1) | 1.1% | — | 26 ene 2020 | A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of… |
| CVE-2019-12718 | Media (6.1) | 0.80% | — | 16 oct 2019 | A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the… |
| CVE-2019-12636 | Alta (8.8) | 0.65% | — | 16 oct 2019 | A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an… |
| CVE-2019-1806 | Alta (7.7) | 2.0% | — | 15 may 2019 | A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Small Business Sx200, Sx300, Sx500, ESW2 Series Managed Switches and Small Business Sx250, Sx350, Sx550 Series Switches… |
| CVE-2019-1859 | Alta (7.2) | 0.84% | — | 3 may 2019 | A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to bypass client-side certificate authentication and revert to password authentication.… |
| CVE-2018-15439 | Crítica (9.8) | 50% | — | 8 nov 2018 | A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under… |
| CVE-2017-12308 | Media (6.1) | 0.83% | — | 18 ene 2018 | A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of… |
| CVE-2017-12307 | Media (6.1) | 0.87% | — | 18 ene 2018 | A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web… |
| CVE-2017-6720 | Media (6.5) | 1.4% | — | 21 sept 2017 | A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of… |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.