{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:12:14Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"cisco-sa-20200129-smlbus-switch-disclos","slug":"cisco-sa-20200129-smlbus-switch-disclos","vendor":"Cisco","title":"Cisco Small Business Switches Information Disclosure Vulnerability","summary":"A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web UI of an affected device. A successful exploit could allow the attacker to access sensitive device information, which includes configuration files. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200129-smlbus-switch-disclos","severity":"High","published_at":"2020-01-29T16:00:00Z","updated_at":"2021-02-18T22:53:27Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200129-smlbus-switch-disclos","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/cisco-sa-20200129-smlbus-switch-disclos/csaf/cisco-sa-20200129-smlbus-switch-disclos.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":5,"public_evidence_count":5,"kev_count":0,"highest_epss":0.1027},"cves":[{"id":"CVE-2019-15993","kev":false,"epss":{"score":0.1027,"percentile":0.95182,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"}}],"public_evidence":[{"product":{"name":"Cisco Small Business 250 Series Smart Switches Software","slug":"cisco-small-business-250-series-smart-switches-software","vendor":"Cisco"},"cve":{"id":"CVE-2019-15993"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:54:15Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Small Business 250 Series Smart Switches Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.1027,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2020-01-29T16:00:00Z","updated_at":"2021-02-18T22:53:27Z","advisory_updated_at":"2021-02-18T22:53:27Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200129-smlbus-switch-disclos","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200129-smlbus-switch-disclos"},"row_display_order":1},{"product":{"name":"Cisco Small Business 350 Series Managed Switches Software","slug":"cisco-small-business-350-series-managed-switches-software","vendor":"Cisco"},"cve":{"id":"CVE-2019-15993"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:54:15Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Small Business 350 Series Managed Switches Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.1027,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2020-01-29T16:00:00Z","updated_at":"2021-02-18T22:53:27Z","advisory_updated_at":"2021-02-18T22:53:27Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200129-smlbus-switch-disclos","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200129-smlbus-switch-disclos"},"row_display_order":2},{"product":{"name":"Cisco Small Business 350X Series Managed Switches Software","slug":"cisco-small-business-350x-series-managed-switches-software","vendor":"Cisco"},"cve":{"id":"CVE-2019-15993"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:54:15Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Small Business 350X Series Managed Switches Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.1027,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2020-01-29T16:00:00Z","updated_at":"2021-02-18T22:53:27Z","advisory_updated_at":"2021-02-18T22:53:27Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200129-smlbus-switch-disclos","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200129-smlbus-switch-disclos"},"row_display_order":3},{"product":{"name":"Cisco Small Business 550X Series Stackable Managed Switches Software","slug":"cisco-small-business-550x-series-stackable-managed-switches-software","vendor":"Cisco"},"cve":{"id":"CVE-2019-15993"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:54:15Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Small Business 550X Series Stackable Managed Switches Software","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.1027,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2020-01-29T16:00:00Z","updated_at":"2021-02-18T22:53:27Z","advisory_updated_at":"2021-02-18T22:53:27Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200129-smlbus-switch-disclos","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200129-smlbus-switch-disclos"},"row_display_order":4},{"product":{"name":"Cisco Small Business 200 Series Smart Switches","slug":"cisco-small-business-200-series-smart-switches","vendor":"Cisco"},"cve":{"id":"CVE-2019-15993"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:54:15Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Small Business 200 Series Smart Switches","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.1027,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:33Z"},"published_at":"2020-01-29T16:00:00Z","updated_at":"2021-02-18T22:53:27Z","advisory_updated_at":"2021-02-18T22:53:27Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200129-smlbus-switch-disclos","remediation":{"url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200129-smlbus-switch-disclos"},"row_display_order":5}]}