Vulnerabilities > Cisco > Sf250 48Hp Firmware > 2.5.0.90

DATE CVE VULNERABILITY TITLE RISK
2020-08-26 CVE-2020-3496 Improper Input Validation vulnerability in Cisco products
A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.
network
low complexity
cisco CWE-20
5.0
2020-07-02 CVE-2020-3297 Improper Authentication vulnerability in Cisco products
A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to defeat authentication protections and gain unauthorized access to the management interface.
network
low complexity
cisco CWE-287
critical
10.0