imPC@ndo IT

Tracker / CVE-2023-20160

CVE-2023-20160

High 8.6

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products and versions

cisco business_250-16p-2g_firmware
cisco business_250-16t-2g_firmware
cisco business_250-24fp-4g_firmware
cisco business_250-24fp-4x_firmware
cisco business_250-24p-4g_firmware
cisco business_250-24p-4x_firmware
cisco business_250-24pp-4g_firmware
cisco business_250-24t-4g_firmware
cisco business_250-24t-4x_firmware
cisco business_250-48p-4g_firmware
cisco business_250-48p-4x_firmware
cisco business_250-48pp-4g_firmware
cisco business_250-48t-4g_firmware
cisco business_250-48t-4x_firmware
cisco business_250-8fp-e-2g_firmware
cisco business_250-8p-e-2g_firmware
cisco business_250-8pp-d_firmware
cisco business_250-8pp-e-2g_firmware
cisco business_250-8t-d_firmware
cisco business_250-8t-e-2g_firmware
cisco business_350-12np-4x_firmware
cisco business_350-12xs_firmware
cisco business_350-12xt_firmware
cisco business_350-16fp-2g_firmware
cisco business_350-16p-2g_firmware
cisco business_350-16p-e-2g_firmware
cisco business_350-16t-2g_firmware
cisco business_350-16t-e-2g_firmware
cisco business_350-16xts_firmware
cisco business_350-24fp-4g_firmware
cisco business_350-24fp-4x_firmware
cisco business_350-24mgp-4x_firmware
cisco business_350-24ngp-4x_firmware
cisco business_350-24p-4g_firmware
cisco business_350-24p-4x_firmware
cisco business_350-24s-4g_firmware
cisco business_350-24t-4g_firmware
cisco business_350-24t-4x_firmware
cisco business_350-24xs_firmware
cisco business_350-24xt_firmware
cisco business_350-24xts_firmware
cisco business_350-48fp-4g_firmware
cisco business_350-48fp-4x_firmware
cisco business_350-48ngp-4x_firmware
cisco business_350-48p-4g_firmware
cisco business_350-48p-4x_firmware
cisco business_350-48t-4g_firmware
cisco business_350-48t-4x_firmware
cisco business_350-48xt-4x_firmware
cisco business_350-8fp-2g_firmware
cisco business_350-8fp-e-2g_firmware
cisco business_350-8mgp-2x_firmware
cisco business_350-8mp-2x_firmware
cisco business_350-8p-2g_firmware
cisco business_350-8p-e-2g_firmware
cisco business_350-8s-e-2g_firmware
cisco business_350-8t-e-2g_firmware
cisco business_350-8xt_firmware
cisco sf200-24_firmware
cisco sf200-24fp_firmware

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References