Cisco Small Business 220 Series Smart Plus Switches vulnerabilities

4 CVEs affecting Cisco Small Business 220 Series Smart Plus Switches, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-1473, published 2016-09-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-1473, published 2016-09-02. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. Cisco Small Business 220 devices with firmware before 1.0.1.1 have a hardcoded SNMP community, which allows remote attackers to read or modify SNMP objects by leveraging knowledge of this community,…
CVE-2016-1472, published 2016-09-02. High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days. The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service (interface outage) via a crafted HTTP request,…
CVE-2016-1471, published 2016-09-02. Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script…
CVE-2016-1470, published 2016-09-02. High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the…