Cisco SG500-28p Firmware vulnerabilities

29 CVEs affecting Cisco SG500-28p Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-20188, published 2023-06-28.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-15439, published 2018-11-08. Critical severity, CVSS 9.8. EPSS: 49.7% chance of exploitation in the next 30 days. A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability…
CVE-2023-20189, published 2023-05-18. Critical severity, CVSS 9.8. EPSS: 11.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…
CVE-2023-20161, published 2023-05-18. Critical severity, CVSS 9.8. EPSS: 10.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…
CVE-2023-20160, published 2023-05-18. Critical severity, CVSS 9.8. EPSS: 10.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…
CVE-2023-20159, published 2023-05-18. Critical severity, CVSS 9.8. EPSS: 10.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…
CVE-2019-15993, published 2020-09-23. Medium severity, CVSS 5.3. EPSS: 10.3% chance of exploitation in the next 30 days. A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software…
CVE-2019-1943, published 2019-07-17. Medium severity, CVSS 6.1. EPSS: 9.7% chance of exploitation in the next 30 days. A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The…
CVE-2020-3297, published 2020-07-02. Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days. A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to defeat authentication…
CVE-2020-3147, published 2020-01-30. High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days. A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is…
CVE-2019-1806, published 2019-05-15. High severity, CVSS 7.7. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Small Business Sx200, Sx300, Sx500, ESW2 Series Managed Switches and Small Business Sx250, Sx350,…

Latest

CVE-2023-20188, published 2023-06-28. Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and Cisco Small Business 500 Series…
CVE-2023-20162, published 2023-05-18. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…
CVE-2023-20158, published 2023-05-18. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…
CVE-2023-20157, published 2023-05-18. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…
CVE-2023-20156, published 2023-05-18. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…
CVE-2023-20024, published 2023-05-18. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition…