9.8

CVE-2023-20160

Warnung

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
CiscoBusiness 250-8pp-d Firmware Version-
   CiscoBusiness 250-8pp-d Version-
CiscoBusiness 250-8t-d Firmware Version-
   CiscoBusiness 250-8t-d Version-
CiscoBusiness 350-12xs Firmware Version-
   CiscoBusiness 350-12xs Version-
CiscoBusiness 350-12xt Firmware Version-
   CiscoBusiness 350-12xt Version-
CiscoBusiness 350-16xts Firmware Version-
   CiscoBusiness 350-16xts Version-
CiscoBusiness 350-24xs Firmware Version-
   CiscoBusiness 350-24xs Version-
CiscoBusiness 350-24xt Firmware Version-
   CiscoBusiness 350-24xt Version-
CiscoBusiness 350-24xts Firmware Version-
   CiscoBusiness 350-24xts Version-
CiscoBusiness 350-8p-2g Firmware Version-
   CiscoBusiness 350-8p-2g Version-
CiscoBusiness 350-8xt Firmware Version-
   CiscoBusiness 350-8xt Version-
CiscoSf200-24 Firmware Version-
   CiscoSf200-24 Version-
CiscoSf200-24fp Firmware Version-
   CiscoSf200-24fp Version-
CiscoSf200-24p Firmware Version-
   CiscoSf200-24p Version-
CiscoSf200-48 Firmware Version-
   CiscoSf200-48 Version-
CiscoSf200-48p Firmware Version-
   CiscoSf200-48p Version-
CiscoSf200e-24 Firmware Version-
   CiscoSf200e-24 Version-
CiscoSf200e-24p Firmware Version-
   CiscoSf200e-24p Version-
CiscoSf200e-48 Firmware Version-
   CiscoSf200e-48 Version-
CiscoSf200e-48p Firmware Version-
   CiscoSf200e-48p Version-
CiscoSf200e48p Firmware Version-
   CiscoSf200e48p Version-
CiscoSf250-08 Firmware Version-
   CiscoSf250-08 Version-
CiscoSf250-08hp Firmware Version-
   CiscoSf250-08hp Version-
CiscoSf250-10p Firmware Version-
   CiscoSf250-10p Version-
CiscoSf250-18 Firmware Version-
   CiscoSf250-18 Version-
CiscoSf250-24 Firmware Version-
   CiscoSf250-24 Version-
CiscoSf250-24p Firmware Version-
   CiscoSf250-24p Version-
CiscoSf250-26 Firmware Version-
   CiscoSf250-26 Version-
CiscoSf250-26hp Firmware Version-
   CiscoSf250-26hp Version-
CiscoSf250-26p Firmware Version-
   CiscoSf250-26p Version-
CiscoSf250-48 Firmware Version-
   CiscoSf250-48 Version-
CiscoSf250-48hp Firmware Version-
   CiscoSf250-48hp Version-
CiscoSf250-50 Firmware Version-
   CiscoSf250-50 Version-
CiscoSf250-50hp Firmware Version-
   CiscoSf250-50hp Version-
CiscoSf250-50p Firmware Version-
   CiscoSf250-50p Version-
CiscoSf250x-24 Firmware Version-
   CiscoSf250x-24 Version-
CiscoSf250x-24p Firmware Version-
   CiscoSf250x-24p Version-
CiscoSf250x-48 Firmware Version-
   CiscoSf250x-48 Version-
CiscoSf250x-48p Firmware Version-
   CiscoSf250x-48p Version-
CiscoSf300-08 Firmware Version-
   CiscoSf300-08 Version-
CiscoSf300-24 Firmware Version-
   CiscoSf300-24 Version-
CiscoSf300-24mp Firmware Version-
   CiscoSf300-24mp Version-
CiscoSf300-24p Firmware Version-
   CiscoSf300-24p Version-
CiscoSf300-24pp Firmware Version-
   CiscoSf300-24pp Version-
CiscoSf300-48 Firmware Version-
   CiscoSf300-48 Version-
CiscoSf300-48p Firmware Version-
   CiscoSf300-48p Version-
CiscoSf300-48pp Firmware Version-
   CiscoSf300-48pp Version-
CiscoSf302-08 Firmware Version-
   CiscoSf302-08 Version-
CiscoSf302-08mpp Firmware Version-
   CiscoSf302-08mpp Version-
CiscoSf302-08pp Firmware Version-
   CiscoSf302-08pp Version-
CiscoSf350-08 Firmware Version-
   CiscoSf350-08 Version-
CiscoSf350-10 Firmware Version-
   CiscoSf350-10 Version-
CiscoSf350-10mp Firmware Version-
   CiscoSf350-10mp Version-
CiscoSf350-10p Firmware Version-
   CiscoSf350-10p Version-
CiscoSf350-10sfp Firmware Version-
   CiscoSf350-10sfp Version-
CiscoSf350-20 Firmware Version-
   CiscoSf350-20 Version-
CiscoSf350-24 Firmware Version-
   CiscoSf350-24 Version-
CiscoSf350-24mp Firmware Version-
   CiscoSf350-24mp Version-
CiscoSf350-24p Firmware Version-
   CiscoSf350-24p Version-
CiscoSf350-28 Firmware Version-
   CiscoSf350-28 Version-
CiscoSf350-28mp Firmware Version-
   CiscoSf350-28mp Version-
CiscoSf350-28p Firmware Version-
   CiscoSf350-28p Version-
CiscoSf350-28sfp Firmware Version-
   CiscoSf350-28sfp Version-
CiscoSf350-48 Firmware Version-
   CiscoSf350-48 Version-
CiscoSf350-48mp Firmware Version-
   CiscoSf350-48mp Version-
CiscoSf350-48p Firmware Version-
   CiscoSf350-48p Version-
CiscoSf350-52 Firmware Version-
   CiscoSf350-52 Version-
CiscoSf350-52mp Firmware Version-
   CiscoSf350-52mp Version-
CiscoSf350-52p Firmware Version-
   CiscoSf350-52p Version-
CiscoSf350-8mp Firmware Version-
   CiscoSf350-8mp Version-
CiscoSf350-8pd Firmware Version-
   CiscoSf350-8pd Version-
CiscoSf352-08 Firmware Version-
   CiscoSf352-08 Version-
CiscoSf352-08mp Firmware Version-
   CiscoSf352-08mp Version-
CiscoSf352-08p Firmware Version-
   CiscoSf352-08p Version-
CiscoSf355-10p Firmware Version-
   CiscoSf355-10p Version-
CiscoSf500-18p Firmware Version-
   CiscoSf500-18p Version-
CiscoSf500-24 Firmware Version-
   CiscoSf500-24 Version-
CiscoSf500-24mp Firmware Version-
   CiscoSf500-24mp Version-
CiscoSf500-24p Firmware Version-
   CiscoSf500-24p Version-
CiscoSf500-48 Firmware Version-
   CiscoSf500-48 Version-
CiscoSf500-48mp Firmware Version-
   CiscoSf500-48mp Version-
CiscoSf500-48p Firmware Version-
   CiscoSf500-48p Version-
CiscoSf550x-24 Firmware Version-
   CiscoSf550x-24 Version-
CiscoSf550x-24mp Firmware Version-
   CiscoSf550x-24mp Version-
CiscoSf550x-24p Firmware Version-
   CiscoSf550x-24p Version-
CiscoSf550x-48 Firmware Version-
   CiscoSf550x-48 Version-
CiscoSf550x-48mp Firmware Version-
   CiscoSf550x-48mp Version-
CiscoSf550x-48p Firmware Version-
   CiscoSf550x-48p Version-
CiscoSg200-08 Firmware Version-
   CiscoSg200-08 Version-
CiscoSg200-08p Firmware Version-
   CiscoSg200-08p Version-
CiscoSg200-10fp Firmware Version-
   CiscoSg200-10fp Version-
CiscoSg200-18 Firmware Version-
   CiscoSg200-18 Version-
CiscoSg200-26 Firmware Version-
   CiscoSg200-26 Version-
CiscoSg200-26fp Firmware Version-
   CiscoSg200-26fp Version-
CiscoSg200-26p Firmware Version-
   CiscoSg200-26p Version-
CiscoSg200-50 Firmware Version-
   CiscoSg200-50 Version-
CiscoSg200-50fp Firmware Version-
   CiscoSg200-50fp Version-
CiscoSg200-50p Firmware Version-
   CiscoSg200-50p Version-
CiscoSg250-08 Firmware Version-
   CiscoSg250-08 Version-
CiscoSg250-08hp Firmware Version-
   CiscoSg250-08hp Version-
CiscoSg250-10p Firmware Version-
   CiscoSg250-10p Version-
CiscoSg250-18 Firmware Version-
   CiscoSg250-18 Version-
CiscoSg250-24 Firmware Version-
   CiscoSg250-24 Version-
CiscoSg250-24p Firmware Version-
   CiscoSg250-24p Version-
CiscoSg250-26 Firmware Version-
   CiscoSg250-26 Version-
CiscoSg250-26hp Firmware Version-
   CiscoSg250-26hp Version-
CiscoSg250-26p Firmware Version-
   CiscoSg250-26p Version-
CiscoSg250-48 Firmware Version-
   CiscoSg250-48 Version-
CiscoSg250-48hp Firmware Version-
   CiscoSg250-48hp Version-
CiscoSg250-50 Firmware Version-
   CiscoSg250-50 Version-
CiscoSg250-50hp Firmware Version-
   CiscoSg250-50hp Version-
CiscoSg250-50p Firmware Version-
   CiscoSg250-50p Version-
CiscoSg250x-24 Firmware Version-
   CiscoSg250x-24 Version-
CiscoSg250x-24p Firmware Version-
   CiscoSg250x-24p Version-
CiscoSg250x-48 Firmware Version-
   CiscoSg250x-48 Version-
CiscoSg250x-48p Firmware Version-
   CiscoSg250x-48p Version-
CiscoSg300-10 Firmware Version-
   CiscoSg300-10 Version-
CiscoSg300-10mp Firmware Version-
   CiscoSg300-10mp Version-
CiscoSg300-10mpp Firmware Version-
   CiscoSg300-10mpp Version-
CiscoSg300-10p Firmware Version-
   CiscoSg300-10p Version-
CiscoSg300-10pp Firmware Version-
   CiscoSg300-10pp Version-
CiscoSg300-10sfp Firmware Version-
   CiscoSg300-10sfp Version-
CiscoSg300-20 Firmware Version-
   CiscoSg300-20 Version-
CiscoSg300-28 Firmware Version-
   CiscoSg300-28 Version-
CiscoSg300-28mp Firmware Version-
   CiscoSg300-28mp Version-
CiscoSg300-28p Firmware Version-
   CiscoSg300-28p Version-
CiscoSg300-28pp Firmware Version-
   CiscoSg300-28pp Version-
CiscoSg300-28sfp Firmware Version-
   CiscoSg300-28sfp Version-
CiscoSg300-52 Firmware Version-
   CiscoSg300-52 Version-
CiscoSg300-52mp Firmware Version-
   CiscoSg300-52mp Version-
CiscoSg300-52p Firmware Version-
   CiscoSg300-52p Version-
CiscoSg350-10 Firmware Version-
   CiscoSg350-10 Version-
CiscoSg350-10mp Firmware Version-
   CiscoSg350-10mp Version-
CiscoSg350-10p Firmware Version-
   CiscoSg350-10p Version-
CiscoSg350-28 Firmware Version-
   CiscoSg350-28 Version-
CiscoSg350-28mp Firmware Version-
   CiscoSg350-28mp Version-
CiscoSg350-28p Firmware Version-
   CiscoSg350-28p Version-
CiscoSg350x-12pmv Firmware Version-
   CiscoSg350x-12pmv Version-
CiscoSg350x-24 Firmware Version-
   CiscoSg350x-24 Version-
CiscoSg350x-24mp Firmware Version-
   CiscoSg350x-24mp Version-
CiscoSg350x-24p Firmware Version-
   CiscoSg350x-24p Version-
CiscoSg350x-24pd Firmware Version-
   CiscoSg350x-24pd Version-
CiscoSg350x-24pv Firmware Version-
   CiscoSg350x-24pv Version-
CiscoSg350x-48 Firmware Version-
   CiscoSg350x-48 Version-
CiscoSg350x-48mp Firmware Version-
   CiscoSg350x-48mp Version-
CiscoSg350x-48p Firmware Version-
   CiscoSg350x-48p Version-
CiscoSg350x-48pv Firmware Version-
   CiscoSg350x-48pv Version-
CiscoSg350x-8pmd Firmware Version-
   CiscoSg350x-8pmd Version-
CiscoSg350xg-24f Firmware Version-
   CiscoSg350xg-24f Version-
CiscoSg350xg-24t Firmware Version-
   CiscoSg350xg-24t Version-
CiscoSg350xg-2f10 Firmware Version-
   CiscoSg350xg-2f10 Version-
CiscoSg350xg-48t Firmware Version-
   CiscoSg350xg-48t Version-
CiscoSg355-10mp Firmware Version-
   CiscoSg355-10mp Version-
CiscoSg355-10p Firmware Version-
   CiscoSg355-10p Version-
CiscoSg500-28 Firmware Version-
   CiscoSg500-28 Version-
CiscoSg500-28mpp Firmware Version-
   CiscoSg500-28mpp Version-
CiscoSg500-28p Firmware Version-
   CiscoSg500-28p Version-
CiscoSg500-28pp Firmware Version-
   CiscoSg500-28pp Version-
CiscoSg500-52p Firmware Version-
   CiscoSg500-52p Version-
CiscoSg500-52pp Firmware Version-
   CiscoSg500-52pp Version-
CiscoSg500x-24 Firmware Version-
   CiscoSg500x-24 Version-
CiscoSg500x-24mpp Firmware Version-
   CiscoSg500x-24mpp Version-
CiscoSg500x-24p Firmware Version-
   CiscoSg500x-24p Version-
CiscoSg500x-48 Firmware Version-
   CiscoSg500x-48 Version-
CiscoSg500x-48mp Firmware Version-
   CiscoSg500x-48mp Version-
CiscoSg500x-48mpp Firmware Version-
   CiscoSg500x-48mpp Version-
CiscoSg500x-48p Firmware Version-
   CiscoSg500x-48p Version-
CiscoSg500x24mpp Firmware Version-
   CiscoSg500x24mpp Version-
CiscoSg500xg-8f8t Firmware Version-
   CiscoSg500xg-8f8t Version-
CiscoSg500xg8f8t Firmware Version-
   CiscoSg500xg8f8t Version-
CiscoSg550x-24 Firmware Version-
   CiscoSg550x-24 Version-
CiscoSg550x-24mp Firmware Version-
   CiscoSg550x-24mp Version-
CiscoSg550x-24mpp Firmware Version-
   CiscoSg550x-24mpp Version-
CiscoSg550x-24p Firmware Version-
   CiscoSg550x-24p Version-
CiscoSg550x-48 Firmware Version-
   CiscoSg550x-48 Version-
CiscoSg550x-48mp Firmware Version-
   CiscoSg550x-48mp Version-
CiscoSg550x-48p Firmware Version-
   CiscoSg550x-48p Version-
CiscoSg550x-48t Firmware Version-
   CiscoSg550x-48t Version-
CiscoSg550xg-24f Firmware Version-
   CiscoSg550xg-24f Version-
CiscoSg550xg-24t Firmware Version-
   CiscoSg550xg-24t Version-
CiscoSg550xg-48t Firmware Version-
   CiscoSg550xg-48t Version-
CiscoSg550xg-8f8t Firmware Version-
   CiscoSg550xg-8f8t Version-
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.34% 0.861
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
psirt@cisco.com 8.6 3.9 4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.