Cisco ESW2-350g-52dc Firmware vulnerabilities

4 CVEs affecting Cisco ESW2-350g-52dc Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-34739, published 2021-11-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-34739, published 2021-11-04. High severity, CVSS 8.1. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and…
CVE-2017-6720, published 2017-09-21. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting…
CVE-2017-12307, published 2018-01-18. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against…
CVE-2017-12308, published 2018-01-18. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of…