CVE-2020-3121: Cisco SF350-48 Firmware

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link and access a specific page. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Affected products

  • Cisco SF350-48 Firmware: up to and including 2.5.0.90
  • Cisco SF350-48mp Firmware: up to and including 2.5.0.90
  • Cisco SF350-48p Firmware: up to and including 2.5.0.90
  • Cisco SF550X-24 Firmware: up to and including 2.5.0.90
  • Cisco SF550X-24p Firmware: up to and including 2.5.0.90
  • Cisco SF550X-48 Firmware: up to and including 2.5.0.90
  • Cisco SF550X-48mp Firmware: up to and including 2.5.0.90
  • Cisco SF550X-48p Firmware: up to and including 2.5.0.90
  • Cisco SG250-08 Firmware: up to and including 2.5.0.90
  • Cisco SG250-08hp Firmware: up to and including 2.5.0.90
  • Cisco SG250-10p Firmware: up to and including 2.5.0.90
  • Cisco SG250-18 Firmware: up to and including 2.5.0.90
  • Cisco SG250-24 Firmware: up to and including 2.5.0.90
  • Cisco SG250-24p Firmware: up to and including 2.5.0.90
  • Cisco SG250-26 Firmware: up to and including 2.5.0.90
  • Cisco SG250-26hp Firmware: up to and including 2.5.0.90
  • Cisco SG250-26p Firmware: up to and including 2.5.0.90
  • Cisco SG250-48 Firmware: up to and including 2.5.0.90
  • Cisco SG250-48hp Firmware: up to and including 2.5.0.90
  • Cisco SG250-50 Firmware: up to and including 2.5.0.90
  • Cisco SG250-50hp Firmware: up to and including 2.5.0.90
  • Cisco SG250-50p Firmware: up to and including 2.5.0.90
  • Cisco SG250X-24 Firmware: up to and including 2.5.0.90
  • Cisco SG250X-24p Firmware: up to and including 2.5.0.90
  • Cisco SG250X-48 Firmware: up to and including 2.5.0.90
  • and 20 more

Published 2020-01-26. Last modified 2026-06-17.