7.5
CVE-2019-15993
- EPSS 20.58%
- Published 23.09.2020 01:15:13
- Last modified 21.11.2024 04:29:53
- Source psirt@cisco.com
- Teams watchlist Login
- Open Login
A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web UI of an affected device. A successful exploit could allow the attacker to access sensitive device information, which includes configuration files.
Data is provided by the National Vulnerability Database (NVD)
Cisco ≫ Sg250x-24 Firmware Version < 2.5.0.92
Cisco ≫ Sg250x-24p Firmware Version < 2.5.0.92
Cisco ≫ Sg250x-48 Firmware Version < 2.5.0.92
Cisco ≫ Sg250x-48p Firmware Version < 2.5.0.92
Cisco ≫ Sg250-08 Firmware Version < 2.5.0.92
Cisco ≫ Sg250-08hp Firmware Version < 2.5.0.92
Cisco ≫ Sg250-10p Firmware Version < 2.5.0.92
Cisco ≫ Sg250-18 Firmware Version < 2.5.0.92
Cisco ≫ Sg250-26 Firmware Version < 2.5.0.92
Cisco ≫ Sg250-26hp Firmware Version < 2.5.0.92
Cisco ≫ Sg250-26p Firmware Version < 2.5.0.92
Cisco ≫ Sg250-50 Firmware Version < 2.5.0.92
Cisco ≫ Sg250-50hp Firmware Version < 2.5.0.92
Cisco ≫ Sg250-50p Firmware Version < 2.5.0.92
Cisco ≫ Sf250-24 Firmware Version < 2.5.0.92
Cisco ≫ Sf250-24p Firmware Version < 2.5.0.92
Cisco ≫ Sf250-48 Firmware Version < 2.5.0.92
Cisco ≫ Sf250-48hp Firmware Version < 2.5.0.92
Cisco ≫ Sg350-10 Firmware Version < 2.5.0.92
Cisco ≫ Sg350-10p Firmware Version < 2.5.0.92
Cisco ≫ Sg350-10mp Firmware Version < 2.5.0.92
Cisco ≫ Sg355-10p Firmware Version < 2.5.0.92
Cisco ≫ Sg350-28 Firmware Version < 2.5.0.92
Cisco ≫ Sg350-28p Firmware Version < 2.5.0.92
Cisco ≫ Sg350-28mp Firmware Version < 2.5.0.92
Cisco ≫ Sf350-48 Firmware Version < 2.5.0.92
Cisco ≫ Sf350-48p Firmware Version < 2.5.0.92
Cisco ≫ Sf350-48mp Firmware Version < 2.5.0.92
Cisco ≫ Sg350xg-2f10 Firmware Version < 2.5.0.92
Cisco ≫ Sg350xg-24f Firmware Version < 2.5.0.92
Cisco ≫ Sg350xg-24t Firmware Version < 2.5.0.92
Cisco ≫ Sg350xg-48t Firmware Version < 2.5.0.92
Cisco ≫ Sg350x-24 Firmware Version < 2.5.0.92
Cisco ≫ Sg350x-24p Firmware Version < 2.5.0.92
Cisco ≫ Sg350x-24mp Firmware Version < 2.5.0.92
Cisco ≫ Sg350x-48 Firmware Version < 2.5.0.92
Cisco ≫ Sg350x-48p Firmware Version < 2.5.0.92
Cisco ≫ Sg350x-48mp Firmware Version < 2.5.0.92
Cisco ≫ Sx550x-16ft Firmware Version < 2.5.0.92
Cisco ≫ Sx550x-24ft Firmware Version < 2.5.0.92
Cisco ≫ Sx550x-12f Firmware Version < 2.5.0.92
Cisco ≫ Sx550x-24f Firmware Version < 2.5.0.92
Cisco ≫ Sx550x-24 Firmware Version < 2.5.0.92
Cisco ≫ Sx550x-52 Firmware Version < 2.5.0.92
Cisco ≫ Sg550x-24 Firmware Version < 2.5.0.92
Cisco ≫ Sg550x-24p Firmware Version < 2.5.0.92
Cisco ≫ Sg550x-24mp Firmware Version < 2.5.0.92
Cisco ≫ Sg550x-24mpp Firmware Version < 2.5.0.92
Cisco ≫ Sg550x-48 Firmware Version < 2.5.0.92
Cisco ≫ Sg550x-48p Firmware Version < 2.5.0.92
Cisco ≫ Sg550x-48mp Firmware Version < 2.5.0.92
Cisco ≫ Sf550x-24 Firmware Version < 2.5.0.92
Cisco ≫ Sf550x-24p Firmware Version < 2.5.0.92
Cisco ≫ Sf550x-24mp Firmware Version < 2.5.0.92
Cisco ≫ Sf550x-48 Firmware Version < 2.5.0.92
Cisco ≫ Sf550x-48p Firmware Version < 2.5.0.92
Cisco ≫ Sf550x-48mp Firmware Version < 2.5.0.92
Cisco ≫ Sg200-50 Firmware Version < 1.4.11.4
Cisco ≫ Sg200-50p Firmware Version < 1.4.11.4
Cisco ≫ Sg200-50fp Firmware Version < 1.4.11.4
Cisco ≫ Sg200-26 Firmware Version < 1.4.11.4
Cisco ≫ Sg200-26p Firmware Version < 1.4.11.4
Cisco ≫ Sg200-26fp Firmware Version < 1.4.11.4
Cisco ≫ Sg200-18 Firmware Version < 1.4.11.4
Cisco ≫ Sg200-10fp Firmware Version < 1.4.11.4
Cisco ≫ Sg200-08 Firmware Version < 1.4.11.4
Cisco ≫ Sg200-08p Firmware Version < 1.4.11.4
Cisco ≫ Sf200-24 Firmware Version < 1.4.11.4
Cisco ≫ Sf200-24p Firmware Version < 1.4.11.4
Cisco ≫ Sf200-24fp Firmware Version < 1.4.11.4
Cisco ≫ Sf200-48 Firmware Version < 1.4.11.4
Cisco ≫ Sf200-48p Firmware Version < 1.4.11.4
Cisco ≫ Sg200-50 Firmware Version < 1.4.11.4
Cisco ≫ Sg200-50p Firmware Version < 1.4.11.4
Cisco ≫ Sg200-50fp Firmware Version < 1.4.11.4
Cisco ≫ Sg200-26 Firmware Version < 1.4.11.4
Cisco ≫ Sg200-26p Firmware Version < 1.4.11.4
Cisco ≫ Sg200-26fp Firmware Version < 1.4.11.4
Cisco ≫ Sg200-18 Firmware Version < 1.4.11.4
Cisco ≫ Sg200-10fp Firmware Version < 1.4.11.4
Cisco ≫ Sg200-08 Firmware Version < 1.4.11.4
Cisco ≫ Sg200-08p Firmware Version < 1.4.11.4
Cisco ≫ Sf200-24 Firmware Version < 1.4.11.4
Cisco ≫ Sf200-24p Firmware Version < 1.4.11.4
Cisco ≫ Sf200-24fp Firmware Version < 1.4.11.4
Cisco ≫ Sf200-48 Firmware Version < 1.4.11.4
Cisco ≫ Sf200-48p Firmware Version < 1.4.11.4
Cisco ≫ Sf302-08pp Firmware Version < 1.4.11.4
Cisco ≫ Sf302-08mpp Firmware Version < 1.4.11.4
Cisco ≫ Sg300-10pp Firmware Version < 1.4.11.4
Cisco ≫ Sg300-10mpp Firmware Version < 1.4.11.4
Cisco ≫ Sf300-24pp Firmware Version < 1.4.11.4
Cisco ≫ Sf300-48pp Firmware Version < 1.4.11.4
Cisco ≫ Sg300-28pp Firmware Version < 1.4.11.4
Cisco ≫ Sf300-08 Firmware Version < 1.4.11.4
Cisco ≫ Sf300-48p Firmware Version < 1.4.11.4
Cisco ≫ Sg300-10mp Firmware Version < 1.4.11.4
Cisco ≫ Sg300-10p Firmware Version < 1.4.11.4
Cisco ≫ Sg300-10 Firmware Version < 1.4.11.4
Cisco ≫ Sg300-28p Firmware Version < 1.4.11.4
Cisco ≫ Sf300-24p Firmware Version < 1.4.11.4
Cisco ≫ Sf302-08mp Firmware Version < 1.4.11.4
Cisco ≫ Sg300-28 Firmware Version < 1.4.11.4
Cisco ≫ Sf300-48 Firmware Version < 1.4.11.4
Cisco ≫ Sg300-20 Firmware Version < 1.4.11.4
Cisco ≫ Sf302-08p Firmware Version < 1.4.11.4
Cisco ≫ Sg300-52 Firmware Version < 1.4.11.4
Cisco ≫ Sf300-24 Firmware Version < 1.4.11.4
Cisco ≫ Sf302-08 Firmware Version < 1.4.11.4
Cisco ≫ Sf300-24mp Firmware Version < 1.4.11.4
Cisco ≫ Sg300-10sfp Firmware Version < 1.4.11.4
Cisco ≫ Sg300-28mp Firmware Version < 1.4.11.4
Cisco ≫ Sg300-52p Firmware Version < 1.4.11.4
Cisco ≫ Sg300-52mp Firmware Version < 1.4.11.4
Cisco ≫ Sg500-28mpp Firmware Version < 1.4.11.4
Cisco ≫ Sg500-52mp Firmware Version < 1.4.11.4
Cisco ≫ Sg500xg-8f8t Firmware Version < 1.4.11.4
Cisco ≫ Sf500-24 Firmware Version < 1.4.11.4
Cisco ≫ Sf500-24p Firmware Version < 1.4.11.4
Cisco ≫ Sf500-48 Firmware Version < 1.4.11.4
Cisco ≫ Sf500-48p Firmware Version < 1.4.11.4
Cisco ≫ Sg500-28 Firmware Version < 1.4.11.4
Cisco ≫ Sg500-28p Firmware Version < 1.4.11.4
Cisco ≫ Sg500-52 Firmware Version < 1.4.11.4
Cisco ≫ Sg500-52p Firmware Version < 1.4.11.4
Cisco ≫ Sg500x-24 Firmware Version < 1.4.11.4
Cisco ≫ Sg500x-24p Firmware Version < 1.4.11.4
Cisco ≫ Sg500x-48 Firmware Version < 1.4.11.4
Cisco ≫ Sg500x-48p Firmware Version < 1.4.11.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 20.58% | 0.954 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
| psirt@cisco.com | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.