Cisco Small Business Switches Information Disclosure Vulnerability
A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web UI of an affected device. A successful exploit could allow the attacker to access sensitive device information, which includes configuration files. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200129-smlbus-switch-disclos ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200129-smlbus-switch-disclos"]
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-15993US | medium5.3 | Exploit | ||
A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists beca… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200129-smlbus-switch-disclosexternal
- Security Vulnerability Policyexternal
- considering software upgradesexternal
- Software Centerexternal
- https://www.cisco.com/c/en/us/products/end-user-license-agreement.htmlexternal
- https://www.cisco.com/c/en/us/support/web/tsd-cisco-worldwide-contacts.htmlexternal
- Cisco Security Advisories and Alerts pageexternal
Behebungen (5)
- BehobenCisco Small Business 200 Series Smart Switches
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Small Business 250 Series Smart Switches Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Small Business 350 Series Managed Switches Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Small Business 350X Series Managed Switches Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - BehobenCisco Small Business 550X Series Stackable Managed Switches Software
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan