Cisco SF220-48 Firmware vulnerabilities

7 CVEs affecting Cisco SF220-48 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-1571, published 2021-06-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-1913, published 2019-08-07. Critical severity, CVSS 9.8. EPSS: 25.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the…
CVE-2019-1914, published 2019-08-07. High severity, CVSS 7.2. EPSS: 24.9% chance of exploitation in the next 30 days. A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an authenticated, remote attacker to perform a command injection attack. The…
CVE-2019-1912, published 2019-08-07. Critical severity, CVSS 9.1. EPSS: 17% chance of exploitation in the next 30 days. A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due…
CVE-2021-1571, published 2021-06-16. Medium severity, CVSS 6.1. EPSS: 9.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary…
CVE-2021-1543, published 2021-06-16. Medium severity, CVSS 6.1. EPSS: 9.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary…
CVE-2021-1541, published 2021-06-16. High severity, CVSS 7.2. EPSS: 8.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary…
CVE-2021-1542, published 2021-06-16. High severity, CVSS 8.1. EPSS: 1.4% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary…