cisco sf250-48hp firmware

Name: cisco sf250-48hp firmware
Brand: cisco

productUS

cpe:2.3:o:cisco:sf250-48hp_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

10critical6high3medium0low

updated 2026-10-28

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-15439US	critical9.8OT high	49.7% (99th)	Exploit	no fix	2018-11-08	—
CVE-2019-15993US	medium5.3	10.3% (96th)	Exploit	2.5.0.92	2020-09-23	< 2.5.0.92
CVE-2023-20189US	critical9.8	12.0% (96th)	—	no fix	2023-05-18	—
CVE-2023-20161US	critical9.8	11.1% (96th)	—	no fix	2023-05-18	—
CVE-2023-20160US	critical9.8	11.1% (96th)	—	no fix	2023-05-18	—
CVE-2023-20159US	critical9.8	11.1% (96th)	—	no fix	2023-05-18	—
CVE-2020-3297US	critical9.8	3.04% (87th)	—	2.5.5.47	2020-07-02	< 2.5.5.47
CVE-2019-1806US	high7.7	2.05% (81st)	—	2.5.0.78	2019-05-15	< 2.5.0.78
CVE-2020-3363US	high8.6	1.82% (79th)	—	no fix	2020-08-17	—
CVE-2020-3496US	medium5.3	1.74% (78th)	—	no fix	2020-08-26	≤ 2.5.5.47
CVE-2021-34739US	high8.1	1.67% (77th)	—	no fix	2021-11-04	≤ 2.5
CVE-2023-20024US	high7.5	1.58% (75th)	—	no fix	2023-05-18	—
CVE-2023-20162US	critical9.8	1.51% (74th)	—	no fix	2023-05-18	—
CVE-2023-20158US	critical9.8	1.51% (74th)	—	no fix	2023-05-18	—
CVE-2023-20157US	critical9.8	1.51% (74th)	—	no fix	2023-05-18	—
CVE-2023-20156US	critical9.8	1.51% (74th)	—	no fix	2023-05-18	—
CVE-2019-1859US	high7.2	0.84% (58th)	—	2.5.0.78	2019-05-03	< 2.5.0.78
CVE-2019-12718US	medium6.1	0.80% (56th)	—	2.5.0.90	2019-10-16	< 2.5.0.90
CVE-2019-12636US	high8.8	0.65% (51st)	—	2.5.0.90	2019-10-16	< 2.5.0.90

The flaw types (CWEs) most of these CVEs share.

CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')9 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-287Improper Authentication2 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-16CWE-161 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-285Improper Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.