Security News > 2020 > January > Cisco Patches DoS, Information Disclosure Flaws in Small Business Switches
Cisco this week informed customers that some of its Small Business Switches are affected by high-severity vulnerabilities that can be exploited to obtain sensitive device information and to launch denial-of-service attacks.
The information disclosure vulnerability is caused by the lack of proper authentication controls and it can be exploited by sending specially crafted HTTP requests to the user interface of an affected switch.
The DoS vulnerability, caused due to improper validation of requests sent to the web interface, can be exploited to cause a device to reload and enter a DoS condition by sending it malicious requests.
Cisco has released patches for both vulnerabilities and the company says it's not aware of any attacks exploiting them.
Last week, Cisco informed customers that Webex Meetings sites had been affected by a serious vulnerability that could be exploited to join password-protected meetings without providing a password.