CVE-2018-0408: Cisco SF300-08 Firmware
Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.
A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could allow an authenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvi87330.
Affected products
- Cisco SF300-08 Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SF300-24 Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SF300-24mp Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SF300-24p Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SF300-24pp Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SF300-48 Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SF300-48p Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SF300-48pp Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SF302-08 Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SF302-08mp Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SF302-08mpp Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SF302-08p Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SF302-08pp Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SG300-10 Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SG300-10mp Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SG300-10mpp Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SG300-10p Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SG300-10pp Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SG300-10sfp Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SG300-20 Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SG300-28 Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SG300-28mp Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SG300-28p Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SG300-28pp Firmware: from 1.4.7, up to and including 1.4.7.06
- Cisco SG300-28sfp Firmware: from 1.4.7, up to and including 1.4.7.06
- and 3 more
Published 2018-08-01. Last modified 2026-06-17.