Cisco Small Business Switches Information Disclosure Vulnerability
46Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 7.5epss 10%
from disclosure to weapon924 days
Published on NVDSep 23
1st PoC+924d
exploitation probability
10%top 5% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web UI of an affected device. A successful exploit could allow the attacker to access sensitive device information, which includes configuration files.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Cisco · Cisco Small Business 250 Series Smart Switches Softwarepublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/51248unverifiedcve_referencepacketstormsecurity.com/files/171723/Cisco-Dell-Netgear-Information-Disclosure-Hash-Decrypter.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.