6.1

CVE-2019-12718

Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability

A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link and subsequently access a specific web interface page. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Sf250-24 Firmware Version < 2.5.0.90
   Cisco ≫ Sf250-24 Version -
Cisco ≫ Sf250-24p Firmware Version < 2.5.0.90
   Cisco ≫ Sf250-24p Version -
Cisco ≫ Sf250-48 Firmware Version < 2.5.0.90
   Cisco ≫ Sf250-48 Version -
Cisco ≫ Sf250-48hp Firmware Version < 2.5.0.90
   Cisco ≫ Sf250-48hp Version -
Cisco ≫ Sf250-08 Firmware Version < 2.5.0.90
   Cisco ≫ Sf250-08 Version -
Cisco ≫ Sf250-08hp Firmware Version < 2.5.0.90
   Cisco ≫ Sf250-08hp Version -
Cisco ≫ Sf250-10p Firmware Version < 2.5.0.90
   Cisco ≫ Sf250-10p Version -
Cisco ≫ Sf250-18 Firmware Version < 2.5.0.90
   Cisco ≫ Sf250-18 Version -
Cisco ≫ Sf250-26 Firmware Version < 2.5.0.90
   Cisco ≫ Sf250-26 Version -
Cisco ≫ Sf250-26hp Firmware Version < 2.5.0.90
   Cisco ≫ Sf250-26hp Version -
Cisco ≫ Sf250-26p Firmware Version < 2.5.0.90
   Cisco ≫ Sf250-26p Version -
Cisco ≫ Sf250-50 Firmware Version < 2.5.0.90
   Cisco ≫ Sf250-50 Version -
Cisco ≫ Sf250-50hp Firmware Version < 2.5.0.90
   Cisco ≫ Sf250-50hp Version -
Cisco ≫ Sf250-50p Firmware Version < 2.5.0.90
   Cisco ≫ Sf250-50p Version -
Cisco ≫ Sf250x-24 Firmware Version < 2.5.0.90
   Cisco ≫ Sf250x-24 Version -
Cisco ≫ Sf250x-24p Firmware Version < 2.5.0.90
   Cisco ≫ Sf250x-24p Version -
Cisco ≫ Sf250x-48 Firmware Version < 2.5.0.90
   Cisco ≫ Sf250x-48 Version -
Cisco ≫ Sf250x-48p Firmware Version < 2.5.0.90
   Cisco ≫ Sf250x-48p Version -
Cisco ≫ Sg350-10 Firmware Version < 2.5.0.90
   Cisco ≫ Sg350-10 Version -
Cisco ≫ Sg350-10p Firmware Version < 2.5.0.90
   Cisco ≫ Sg350-10p Version -
Cisco ≫ Sg350-10mp Firmware Version < 2.5.0.90
   Cisco ≫ Sg350-10mp Version -
Cisco ≫ Sg355-10p Firmware Version < 2.5.0.90
   Cisco ≫ Sg355-10p Version -
Cisco ≫ Sg350-28 Firmware Version < 2.5.0.90
   Cisco ≫ Sg350-28 Version -
Cisco ≫ Sg350-28p Firmware Version < 2.5.0.90
   Cisco ≫ Sg350-28p Version -
Cisco ≫ Sg350-28mp Firmware Version < 2.5.0.90
   Cisco ≫ Sg350-28mp Version -
Cisco ≫ Sf350-48 Firmware Version < 2.5.0.90
   Cisco ≫ Sf350-48 Version -
Cisco ≫ Sf350-48p Firmware Version < 2.5.0.90
   Cisco ≫ Sf350-48p Version -
Cisco ≫ Sf350-48mp Firmware Version < 2.5.0.90
   Cisco ≫ Sf350-48mp Version -
Cisco ≫ Sx550x-16ft Firmware Version < 2.5.0.90
   Cisco ≫ Sx550x-16ft Version -
Cisco ≫ Sx550x-24ft Firmware Version < 2.5.0.90
   Cisco ≫ Sx550x-24ft Version -
Cisco ≫ Sx550x-12f Firmware Version < 2.5.0.90
   Cisco ≫ Sx550x-12f Version -
Cisco ≫ Sx550x-24f Firmware Version < 2.5.0.90
   Cisco ≫ Sx550x-24f Version -
Cisco ≫ Sx550x-24 Firmware Version < 2.5.0.90
   Cisco ≫ Sx550x-24 Version -
Cisco ≫ Sx550x-52 Firmware Version < 2.5.0.90
   Cisco ≫ Sx550x-52 Version -
Cisco ≫ Sg550x-24 Firmware Version < 2.5.0.90
   Cisco ≫ Sg550x-24 Version -
Cisco ≫ Sg550x-24p Firmware Version < 2.5.0.90
   Cisco ≫ Sg550x-24p Version -
Cisco ≫ Sg550x-24mp Firmware Version < 2.5.0.90
   Cisco ≫ Sg550x-24mp Version -
Cisco ≫ Sg550x-24mpp Firmware Version < 2.5.0.90
   Cisco ≫ Sg550x-24mpp Version -
Cisco ≫ Sg550x-48 Firmware Version < 2.5.0.90
   Cisco ≫ Sg550x-48 Version -
Cisco ≫ Sg550x-48p Firmware Version < 2.5.0.90
   Cisco ≫ Sg550x-48p Version -
Cisco ≫ Sg550x-48mp Firmware Version < 2.5.0.90
   Cisco ≫ Sg550x-48mp Version -
Cisco ≫ Sf550x-24 Firmware Version < 2.5.0.90
   Cisco ≫ Sf550x-24 Version -
Cisco ≫ Sf550x-24p Firmware Version < 2.5.0.90
   Cisco ≫ Sf550x-24p Version -
Cisco ≫ Sf550x-24mp Firmware Version < 2.5.0.90
   Cisco ≫ Sf550x-24mp Version -
Cisco ≫ Sf550x-48 Firmware Version < 2.5.0.90
   Cisco ≫ Sf550x-48 Version -
Cisco ≫ Sf550x-48p Firmware Version < 2.5.0.90
   Cisco ≫ Sf550x-48p Version -
Cisco ≫ Sf550x-48mp Firmware Version < 2.5.0.90
   Cisco ≫ Sf550x-48mp Version -
Cisco ≫ Sf200-24 Firmware Version < 1.4.11
   Cisco ≫ Sf200-24 Version -
Cisco ≫ Sf200-24fp Firmware Version < 1.4.11
   Cisco ≫ Sf200-24fp Version -
Cisco ≫ Sf200-24p Firmware Version < 1.4.11
   Cisco ≫ Sf200-24p Version -
Cisco ≫ Sf200-48 Firmware Version < 1.4.11
   Cisco ≫ Sf200-48 Version -
Cisco ≫ Sf200-48p Firmware Version < 1.4.11
   Cisco ≫ Sf200-48p Version -
Cisco ≫ Sf200e-24 Firmware Version < 1.4.11
   Cisco ≫ Sf200e-24 Version -
Cisco ≫ Sf200e-24p Firmware Version < 1.4.11
   Cisco ≫ Sf200e-24p Version -
Cisco ≫ Sf200e-48 Firmware Version < 1.4.11
   Cisco ≫ Sf200e-48 Version -
Cisco ≫ Sf200e48p Firmware Version < 1.4.11
   Cisco ≫ Sf200e48p Version -
Cisco ≫ Sg200-08 Firmware Version < 1.4.11
   Cisco ≫ Sg200-08 Version -
Cisco ≫ Sg200-08p Firmware Version < 1.4.11
   Cisco ≫ Sg200-08p Version -
Cisco ≫ Sg200-10fp Firmware Version < 1.4.11
   Cisco ≫ Sg200-10fp Version -
Cisco ≫ Sg200-18 Firmware Version < 1.4.11
   Cisco ≫ Sg200-18 Version -
Cisco ≫ Sg200-26 Firmware Version < 1.4.11
   Cisco ≫ Sg200-26 Version -
Cisco ≫ Sg200-26fp Firmware Version < 1.4.11
   Cisco ≫ Sg200-26fp Version -
Cisco ≫ Sg200-26p Firmware Version < 1.4.11
   Cisco ≫ Sg200-26p Version -
Cisco ≫ Sg200-50 Firmware Version < 1.4.11
   Cisco ≫ Sg200-50 Version -
Cisco ≫ Sg200-50fp Firmware Version < 1.4.11
   Cisco ≫ Sg200-50fp Version -
Cisco ≫ Sg200-50p Firmware Version < 1.4.11
   Cisco ≫ Sg200-50p Version -
Cisco ≫ Sf302-08pp Firmware Version < 1.4.11
   Cisco ≫ Sf302-08pp Version -
Cisco ≫ Sf302-08mpp Firmware Version < 1.4.11
   Cisco ≫ Sf302-08mpp Version -
Cisco ≫ Sg300-10pp Firmware Version < 1.4.11
   Cisco ≫ Sg300-10pp Version -
Cisco ≫ Sg300-10mpp Firmware Version < 1.4.11
   Cisco ≫ Sg300-10mpp Version -
Cisco ≫ Sf300-24pp Firmware Version < 1.4.11
   Cisco ≫ Sf300-24pp Version -
Cisco ≫ Sf300-48pp Firmware Version < 1.4.11
   Cisco ≫ Sf300-48pp Version -
Cisco ≫ Sg300-28pp Firmware Version < 1.4.11
   Cisco ≫ Sg300-28pp Version -
Cisco ≫ Sf300-08 Firmware Version < 1.4.11
   Cisco ≫ Sf300-08 Version -
Cisco ≫ Sf300-48p Firmware Version < 1.4.11
   Cisco ≫ Sf300-48p Version -
Cisco ≫ Sg300-10mp Firmware Version < 1.4.11
   Cisco ≫ Sg300-10mp Version -
Cisco ≫ Sg300-10p Firmware Version < 1.4.11
   Cisco ≫ Sg300-10p Version -
Cisco ≫ Sg300-10 Firmware Version < 1.4.11
   Cisco ≫ Sg300-10 Version -
Cisco ≫ Sg300-28p Firmware Version < 1.4.11
   Cisco ≫ Sg300-28p Version -
Cisco ≫ Sf300-24p Firmware Version < 1.4.11
   Cisco ≫ Sf300-24p Version -
Cisco ≫ Sf302-08mp Firmware Version < 1.4.11
   Cisco ≫ Sf302-08mp Version -
Cisco ≫ Sg300-28 Firmware Version < 1.4.11
   Cisco ≫ Sg300-28 Version -
Cisco ≫ Sf300-48 Firmware Version < 1.4.11
   Cisco ≫ Sf300-48 Version -
Cisco ≫ Sg300-20 Firmware Version < 1.4.11
   Cisco ≫ Sg300-20 Version -
Cisco ≫ Sf302-08p Firmware Version < 1.4.11
   Cisco ≫ Sf302-08p Version -
Cisco ≫ Sg300-52 Firmware Version < 1.4.11
   Cisco ≫ Sg300-52 Version -
Cisco ≫ Sf300-24 Firmware Version < 1.4.11
   Cisco ≫ Sf300-24 Version -
Cisco ≫ Sf302-08 Firmware Version < 1.4.11
   Cisco ≫ Sf302-08 Version -
Cisco ≫ Sf300-24mp Firmware Version < 1.4.11
   Cisco ≫ Sf300-24mp Version -
Cisco ≫ Sg300-10sfp Firmware Version < 1.4.11
   Cisco ≫ Sg300-10sfp Version -
Cisco ≫ Sg300-28mp Firmware Version < 1.4.11
   Cisco ≫ Sg300-28mp Version -
Cisco ≫ Sg300-52p Firmware Version < 1.4.11
   Cisco ≫ Sg300-52p Version -
Cisco ≫ Sg300-52mp Firmware Version < 1.4.11
   Cisco ≫ Sg300-52mp Version -
Cisco ≫ Sg500-28mpp Firmware Version < 1.4.11
   Cisco ≫ Sg500-28mpp Version -
Cisco ≫ Sg500-52mp Firmware Version < 1.4.11
   Cisco ≫ Sg500-52mp Version -
Cisco ≫ Sg500xg-8f8t Firmware Version < 1.4.11
   Cisco ≫ Sg500xg-8f8t Version -
Cisco ≫ Sf500-24 Firmware Version < 1.4.11
   Cisco ≫ Sf500-24 Version -
Cisco ≫ Sf500-24p Firmware Version < 1.4.11
   Cisco ≫ Sf500-24p Version -
Cisco ≫ Sf500-48 Firmware Version < 1.4.11
   Cisco ≫ Sf500-48 Version -
Cisco ≫ Sf500-48p Firmware Version < 1.4.11
   Cisco ≫ Sf500-48p Version -
Cisco ≫ Sg500-28 Firmware Version < 1.4.11
   Cisco ≫ Sg500-28 Version -
Cisco ≫ Sg500-28p Firmware Version < 1.4.11
   Cisco ≫ Sg500-28p Version -
Cisco ≫ Sg500-52 Firmware Version < 1.4.11
   Cisco ≫ Sg500-52 Version -
Cisco ≫ Sg500-52p Firmware Version < 1.4.11
   Cisco ≫ Sg500-52p Version -
Cisco ≫ Sg500x-24 Firmware Version < 1.4.11
   Cisco ≫ Sg500x-24 Version -
Cisco ≫ Sg500x-24p Firmware Version < 1.4.11
   Cisco ≫ Sg500x-24p Version -
Cisco ≫ Sg500x-48 Firmware Version < 1.4.11
   Cisco ≫ Sg500x-48 Version -
Cisco ≫ Sg500x-48p Firmware Version < 1.4.11
   Cisco ≫ Sg500x-48p Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.8% 0.518
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Cisco PSIRT 6.1 2.8 2.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191016-sbss-xss
Vendor Advisory