Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveCiscoCVE-2021-1542
HistoryJun 16, 2021 - 6:15 p.m.

CVE-2021-1542

2021-06-1618:15:08
CWE-287
cisco
web.nvd.nist.gov
44
4
cisco
small business
220 series
smart switches
vulnerabilities
web-based management
xss
html injection
security advisory
nvd
cve-2021-1542

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

54.0%

JSON

Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting (XSS) attack Conduct an HTML injection attack For more information about these vulnerabilities, see the Details section of this advisory.

Affected configurations

Nvd
Node
ciscosf220-24_firmwareRange<1.2.0.6
AND
ciscosf220-24Match-
Node
ciscosf220-24p_firmwareRange<1.2.0.6
AND
ciscosf220-24pMatch-
Node
ciscosf220-48_firmwareRange<1.2.0.6
AND
ciscosf220-48Match-
Node
ciscosf220-48p_firmwareRange<1.2.0.6
AND
ciscosf220-48pMatch-
Node
ciscosg220-26_firmwareRange<1.2.0.6
AND
ciscosg220-26Match-
Node
ciscosg220-26p_firmwareRange<1.2.0.6
AND
ciscosg220-26pMatch-
Node
ciscosg220-28mp_firmwareRange<1.2.0.6
AND
ciscosg220-28mpMatch-
Node
ciscosg220-50_firmwareRange<1.2.0.6
AND
ciscosg220-50Match-
Node
ciscosg220-50p_firmwareRange<1.2.0.6
AND
ciscosg220-50pMatch-
VendorProductVersionCPE
ciscosf220-24_firmware*cpe:2.3:o:cisco:sf220-24_firmware:*:*:*:*:*:*:*:*
ciscosf220-24-cpe:2.3:h:cisco:sf220-24:-:*:*:*:*:*:*:*
ciscosf220-24p_firmware*cpe:2.3:o:cisco:sf220-24p_firmware:*:*:*:*:*:*:*:*
ciscosf220-24p-cpe:2.3:h:cisco:sf220-24p:-:*:*:*:*:*:*:*
ciscosf220-48_firmware*cpe:2.3:o:cisco:sf220-48_firmware:*:*:*:*:*:*:*:*
ciscosf220-48-cpe:2.3:h:cisco:sf220-48:-:*:*:*:*:*:*:*
ciscosf220-48p_firmware*cpe:2.3:o:cisco:sf220-48p_firmware:*:*:*:*:*:*:*:*
ciscosf220-48p-cpe:2.3:h:cisco:sf220-48p:-:*:*:*:*:*:*:*
ciscosg220-26_firmware*cpe:2.3:o:cisco:sg220-26_firmware:*:*:*:*:*:*:*:*
ciscosg220-26-cpe:2.3:h:cisco:sg220-26:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 181

CNA Affected

[
  {
    "product": "Cisco Small Business 220 Series Smart Plus Switches",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Social References

More

Related

cvelist 1
prion 1
nvd 1
cisco 1
threatpost 1
cvelist
cvelist
CVE-2021-1542 Cisco Small Business 220 Series Smart Switches Vulnerabilities
2021-06-16 17:45:51
prion
prion
Cross site scripting
2021-06-16 18:15:00
nvd
nvd
CVE-2021-1542
2021-06-16 18:15:08
cisco
cisco
Cisco Small Business 220 Series Smart Switches Vulnerabilities
2021-06-16 16:00:00
threatpost
threatpost
Cisco Smart Switches Riddled with Security Holes
2021-06-17 19:30:46

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

54.0%

JSON
Related for CVE-2021-1542
cvelist1prion1nvd1cisco1threatpost1