Cisco Sf-220-24 Firmware vulnerabilities

3 CVEs affecting Cisco Sf-220-24 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-1914, published 2019-08-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-1913, published 2019-08-07. Critical severity, CVSS 9.8. EPSS: 25.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the…
CVE-2019-1914, published 2019-08-07. High severity, CVSS 7.2. EPSS: 24.9% chance of exploitation in the next 30 days. A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an authenticated, remote attacker to perform a command injection attack. The…
CVE-2019-1912, published 2019-08-07. Critical severity, CVSS 9.1. EPSS: 17% chance of exploitation in the next 30 days. A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due…