Vulnslist

find the latest Cisco vulnerabilities

Cisco Small Business 220 Series Smart Switches Vulnerabilities

cisco-sa-ciscosb-multivulns-Wwyb7s5E · High · Published · Updated

Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting (XSS) attack Conduct an HTML injection attack For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ciscosb-multivulns-Wwyb7s5E

Cisco advisory ·CSAF JSON

Workarounds

There are no workarounds that address these vulnerabilities.

CVEsCVE-2021-1541, CVE-2021-1542, CVE-2021-1543, CVE-2021-1571
Cisco Bug IDsCSCvx57935, CSCvx57925, CSCvx57830
CVSS ScoreBase 7.2
Base 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:X
Base 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:X/RL:X/RC:X
Base 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:X/RL:X/RC:X
Product Names From Source
Cisco Small Business 220 Series Smart Plus Switches, Cisco Small Business Smart and Managed Switches

CSAF Product Statuses

Product Status Source CVE Rows
Cisco Small Business 220 Series Smart Plus Switches known_affected cisco_csaf CVE-2021-1541, CVE-2021-1542, CVE-2021-1543 3
Cisco Small Business Smart and Managed Switches known_affected cisco_csaf CVE-2021-1571 1

Related Products

Product CVE Evidence
Cisco Small Business 220 Series Smart Plus Switches CVE-2021-1541 Cisco CSAF
Cisco Small Business Smart and Managed Switches CVE-2021-1541 Cisco OpenVuln
Cisco Business 220 Series Switches CVE-2021-1541 Cisco OpenVuln
Cisco Small Business 220 Series Smart Switches CVE-2021-1541 Cisco OpenVuln
Cisco Small Business 220 Series Smart Plus Switches CVE-2021-1542 Cisco CSAF
Cisco Small Business Smart and Managed Switches CVE-2021-1542 Cisco OpenVuln
Cisco Business 220 Series Switches CVE-2021-1542 Cisco OpenVuln
Cisco Small Business 220 Series Smart Switches CVE-2021-1542 Cisco OpenVuln
Cisco Small Business 220 Series Smart Plus Switches CVE-2021-1543 Cisco CSAF
Cisco Small Business Smart and Managed Switches CVE-2021-1543 Cisco OpenVuln
Cisco Business 220 Series Switches CVE-2021-1543 Cisco OpenVuln
Cisco Small Business 220 Series Smart Switches CVE-2021-1543 Cisco OpenVuln
Cisco Small Business 220 Series Smart Plus Switches CVE-2021-1571 Cisco OpenVuln · family-level
Cisco Small Business Smart and Managed Switches CVE-2021-1571 Cisco CSAF
Cisco Business 220 Series Switches CVE-2021-1571 Cisco OpenVuln
Cisco Small Business 220 Series Smart Switches CVE-2021-1571 Cisco OpenVuln