5.3

CVE-2016-1299

The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a denial of service (HTTPS outage) via crafted HTTPS requests, aka Bug ID CSCuw87174.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ 300 Series Managed Switch Firmware Version 1.4.1
   Cisco ≫ Sf300-08
   Cisco ≫ Sf300-24
   Cisco ≫ Sf300-24mp
   Cisco ≫ Sf300-24p
   Cisco ≫ Sf300-24pp
   Cisco ≫ Sf300-48
   Cisco ≫ Sf300-48p
   Cisco ≫ Sf300-48pp
   Cisco ≫ Sf302-08
   Cisco ≫ Sf302-08mp
   Cisco ≫ Sf302-08mpp
   Cisco ≫ Sf302-08p
   Cisco ≫ Sf302-08pp
   Cisco ≫ Sg300-10
   Cisco ≫ Sg300-10mp
   Cisco ≫ Sg300-10mpp
   Cisco ≫ Sg300-10p
   Cisco ≫ Sg300-10pp
   Cisco ≫ Sg300-10sfp
   Cisco ≫ Sg300-20
   Cisco ≫ Sg300-28
   Cisco ≫ Sg300-28mp
   Cisco ≫ Sg300-28p
   Cisco ≫ Sg300-28pp
   Cisco ≫ Sg300-52
   Cisco ≫ Sg300-52mp
   Cisco ≫ Sg300-52p
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.26% 0.656
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.3 3.9 1.4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-sbms
Vendor Advisory