cisco sf300-48p firmware

Name: cisco sf300-48p firmware
Brand: cisco

productUS

cpe:2.3:o:cisco:sf300-48p_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

10critical10high12medium0low

updated 2026-10-28

vulnerabilities (32)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-15439US	critical9.8OT high	49.7% (99th)	Exploit	no fix	2018-11-08	—
CVE-2019-15993US	medium5.3	10.3% (96th)	Exploit	1.4.11.4	2020-09-23	< 1.4.11.4
CVE-2019-1943US	medium6.1	9.69% (95th)	Exploit	no fix	2019-07-17	= 1.3.7.18
CVE-2023-20189US	critical9.8	12.0% (96th)	—	no fix	2023-05-18	—
CVE-2023-20161US	critical9.8	11.1% (96th)	—	no fix	2023-05-18	—
CVE-2023-20160US	critical9.8	11.1% (96th)	—	no fix	2023-05-18	—
CVE-2023-20159US	critical9.8	11.1% (96th)	—	no fix	2023-05-18	—
CVE-2020-3297US	critical9.8	3.04% (87th)	—	no fix	2020-07-02	—
CVE-2020-3147US	high7.5	2.28% (83rd)	—	1.3.7.18	2020-01-30	< 1.3.7.18
CVE-2019-1814US	high8.6	2.13% (82nd)	—	1.4.10.6	2019-05-16	< 1.4.10.6
CVE-2019-1806US	high7.7	2.05% (81st)	—	1.4.10.6	2019-05-15	< 1.4.10.6
CVE-2020-3363US	high8.6	1.82% (79th)	—	no fix	2020-08-17	—
CVE-2019-1892US	high7.5	1.77% (78th)	—	1.4.10.6	2019-07-06	< 1.4.10.6
CVE-2019-1891US	high7.5	1.77% (78th)	—	1.4.10.6	2019-07-06	< 1.4.10.6
CVE-2020-3496US	medium5.3	1.74% (78th)	—	no fix	2020-08-26	≤ 2.5.5.47
CVE-2021-34739US	high8.1	1.67% (77th)	—	no fix	2021-11-04	= 1.4.11.02
CVE-2023-20024US	high7.5	1.58% (75th)	—	no fix	2023-05-18	—
CVE-2023-20162US	critical9.8	1.51% (74th)	—	no fix	2023-05-18	—
CVE-2023-20158US	critical9.8	1.51% (74th)	—	no fix	2023-05-18	—
CVE-2023-20157US	critical9.8	1.51% (74th)	—	no fix	2023-05-18	—
CVE-2023-20156US	critical9.8	1.51% (74th)	—	no fix	2023-05-18	—
CVE-2017-6720US	medium6.5	1.40% (72nd)	—	1.4.8.06	2017-09-21	< 1.4.8.06
CVE-2021-40127US	medium5.3	1.28% (70th)	—	no fix	2021-11-04	= 1.4.11.02
CVE-2017-12307US	medium6.1	0.87% (59th)	—	1.4.9.4	2018-01-18	1.4.7.0 → 1.4.9.4
CVE-2019-1859US	high7.2	0.84% (58th)	—	1.4.10.6	2019-05-03	< 1.4.10.6
CVE-2017-12308US	medium6.1	0.83% (57th)	—	1.4.9.4	2018-01-18	1.4.7.0 → 1.4.9.4
CVE-2019-12718US	medium6.1	0.80% (56th)	—	1.4.11	2019-10-16	< 1.4.11
CVE-2018-0465US	medium6.1	0.80% (56th)	—	no fix	2018-10-05	= 1.4.2.4
CVE-2018-0408US	medium5.4	0.68% (52nd)	—	no fix	2018-08-01	1.4.7 → 1.4.7.06
CVE-2018-0407US	medium5.4	0.68% (52nd)	—	no fix	2018-08-01	1.4.7 → 1.4.7.06
CVE-2019-12636US	high8.8	0.65% (51st)	—	1.4.11.02	2019-10-16	< 1.4.11.02
CVE-2023-20188US	medium4.8	0.48% (41st)	—	no fix	2023-06-28	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')9 CVEs
CWE-20Improper Input Validation7 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE32 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan