Cisco Systems Inc. Cisco Small Business 200 Series Smart Switches

Name: Cisco Systems Inc. Cisco Small Business 200 Series Smart Switches
Brand: Cisco Systems Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

9critical6high6medium0low

updated 2026-10-28

vulnerabilities (21)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-15439US	critical9.8OT high	49.7% (99th)	Exploit	no fix	2018-11-08	—
CVE-2019-15993US	medium5.3	10.3% (96th)	Exploit	no fix	2020-09-23	≤ 1.4.11.4
CVE-2019-1943US	medium6.1	9.69% (95th)	Exploit	no fix	2019-07-17	≤ 1.3.7.18
CVE-2023-20189US	critical9.8	12.0% (96th)	—	no fix	2023-05-18	—
CVE-2023-20160US	critical9.8	11.1% (96th)	—	no fix	2023-05-18	—
CVE-2023-20159US	critical9.8	11.1% (96th)	—	no fix	2023-05-18	—
CVE-2020-3297US	critical9.8	3.04% (87th)	—	no fix	2020-07-02	—
CVE-2020-3147US	high7.5	2.28% (83rd)	—	no fix	2020-01-30	≤ 1.3.7.18
CVE-2019-1892US	high7.5	1.77% (78th)	—	no fix	2019-07-06	≤ 1.4.10.6
CVE-2019-1891US	high7.5	1.77% (78th)	—	no fix	2019-07-06	≤ 1.4.10.6
CVE-2020-3496US	medium5.3	1.74% (78th)	—	no fix	2020-08-26	≤ 2.5.5.47
CVE-2021-34739US	high8.1	1.67% (77th)	—	no fix	2021-11-04	≤ 2.5.8.12
CVE-2023-20024US	high7.5	1.58% (75th)	—	no fix	2023-05-18	—
CVE-2023-20162US	critical9.8	1.51% (74th)	—	no fix	2023-05-18	—
CVE-2023-20158US	critical9.8	1.51% (74th)	—	no fix	2023-05-18	—
CVE-2023-20157US	critical9.8	1.51% (74th)	—	no fix	2023-05-18	—
CVE-2023-20156US	critical9.8	1.51% (74th)	—	no fix	2023-05-18	—
CVE-2021-40127US	medium5.3	1.28% (70th)	—	no fix	2021-11-04	—
CVE-2019-1859US	high7.2	0.84% (58th)	—	no fix	2019-05-03	≤ 1.4.10.6
CVE-2019-12718US	medium6.1	0.80% (56th)	—	no fix	2019-10-16	≤ 1.4.11
CVE-2023-20188US	medium4.8	0.48% (42nd)	—	no fix	2023-06-28	—

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')8 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-287Improper Authentication2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-16CWE-161 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.