Vulnerabilities > Cisco > Sg350X 48Mp

DATE CVE VULNERABILITY TITLE RISK
2019-05-03 CVE-2019-1859 Incorrect Authorization vulnerability in Cisco products
A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to bypass client-side certificate authentication and revert to password authentication.
network
low complexity
cisco CWE-863
6.5
2018-11-08 CVE-2018-15439 Use of Hard-coded Credentials vulnerability in Cisco products
A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device.
network
cisco CWE-798
critical
9.3
2018-01-18 CVE-2017-12308 Unspecified vulnerability in Cisco products
A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system.
network
cisco
5.8
2018-01-18 CVE-2017-12307 Cross-site Scripting vulnerability in Cisco products
A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web interface of an affected system.
network
cisco CWE-79
4.3
2017-09-21 CVE-2017-6720 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Cisco products
A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service (DoS) condition.
network
low complexity
cisco CWE-119
6.8