CVE-2019-15993: high-severity vulnerability in Cisco Small Business 250 Series Smart Switches…
Cisco Small Business Switches Information Disclosure Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
46Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 7.5epss 10%
from disclosure to weapon924 days
Published on NVDSep 23
1st PoC+924d
A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web UI of an affected device. A successful exploit could allow the attacker to access sensitive device information, which includes configuration files.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Cisco · Cisco Small Business 250 Series Smart Switches Softwarepublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/51248unverifiedcve_referencepacketstormsecurity.com/files/171723/Cisco-Dell-Netgear-Information-Disclosure-Hash-Decrypter.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Cisco Small Business 250 Series Smart Switches…
In the same product, most dangerous first.
CVE-2020-3363HIGHCisco Small Business Smart and Managed Switches Denial of Service VulnerabilityEPSS 1.8%CVE-2020-3496MEDIUMCisco Small Business Smart and Managed Switches Denial of Service VulnerabilityEPSS 1.7%CVE-2019-12636HIGHCisco Small Business Smart and Managed Switches Cross-Site Request Forgery VulnerabilityEPSS 0.6%