Sf200 24P Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2019-07-06	CVE-2019-1891	Improper Input Validation vulnerability in Cisco products A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. network low complexity cisco CWE-20	7.5
2019-05-15	CVE-2019-1806	Allocation of Resources Without Limits or Throttling vulnerability in Cisco products A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Small Business Sx200, Sx300, Sx500, ESW2 Series Managed Switches and Small Business Sx250, Sx350, Sx550 Series Switches could allow an authenticated, remote attacker to cause the SNMP application of an affected device to cease processing traffic, resulting in the CPU utilization reaching one hundred percent. network low complexity cisco CWE-770	7.7
2019-05-03	CVE-2019-1859	Improper Certificate Validation vulnerability in Cisco products A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to bypass client-side certificate authentication and revert to password authentication. network low complexity cisco CWE-295	7.2
2018-11-08	CVE-2018-15439	Use of Hard-coded Credentials vulnerability in Cisco products A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. network low complexity cisco CWE-798 critical	9.8