imPC@ndo EN

Tracker / CVE-2018-15439

CVE-2018-15439

Critica 9.8

A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability exists because under specific circumstances, the affected software enables a privileged user account without notifying administrators of the system. An attacker could exploit this vulnerability by using this account to log in to an affected device and execute commands with full admin rights. Cisco has not released software updates that address this vulnerability. This advisory will be updated with fixed software information once fixed software becomes available. There is a workaround to address this vulnerability.

Prodotti e versioni affette

cisco sf200-24_firmware
cisco sf200-24fp_firmware
cisco sf200-24p_firmware
cisco sf200-48_firmware
cisco sf200-48p_firmware
cisco sf250-24_firmware
cisco sf250-24p_firmware
cisco sf250-48_firmware
cisco sf250-48hp_firmware
cisco sf300-08_firmware
cisco sf300-24_firmware
cisco sf300-24mp_firmware
cisco sf300-24p_firmware
cisco sf300-24pp_firmware
cisco sf300-48_firmware
cisco sf300-48p_firmware
cisco sf300-48pp_firmware
cisco sf302-08_firmware
cisco sf302-08mp_firmware
cisco sf302-08mpp_firmware
cisco sf302-08p_firmware
cisco sf302-08pp_firmware
cisco sf350-48_firmware
cisco sf350-48mp_firmware
cisco sf350-48p_firmware
cisco sf500-24_firmware
cisco sf500-24p_firmware
cisco sf500-48_firmware
cisco sf500-48p_firmware
cisco sf550x-24_firmware
cisco sf550x-24mp_firmware
cisco sf550x-24p_firmware
cisco sf550x-48_firmware
cisco sf550x-48mp_firmware
cisco sf550x-48p_firmware
cisco sg200-08_firmware
cisco sg200-08p_firmware
cisco sg200-10fp_firmware
cisco sg200-18_firmware
cisco sg200-26_firmware
cisco sg200-26fp_firmware
cisco sg200-26p_firmware
cisco sg200-50_firmware
cisco sg200-50fp_firmware
cisco sg200-50p_firmware
cisco sg250-08_firmware
cisco sg250-08hp_firmware
cisco sg250-10p_firmware
cisco sg250-18_firmware
cisco sg250-26_firmware
cisco sg250-26hp_firmware
cisco sg250-26p_firmware
cisco sg250-50_firmware
cisco sg250-50hp_firmware
cisco sg250-50p_firmware
cisco sg250x-24_firmware
cisco sg250x-24p_firmware
cisco sg250x-48_firmware
cisco sg250x-48p_firmware
cisco sg300-10_firmware

Analisi

Questa pagina non è ancora indicizzabile.Finché non contiene un’analisi originale — cosa espone davvero, come verificare in due minuti se un sistema è stato toccato, cosa fare se lo è stato — la pagina resta noindex. È il database a deciderlo, non il modello di pagina.

Riferimenti