Cisco SX550X-12f Firmware vulnerabilities

13 CVEs affecting Cisco SX550X-12f Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-34739, published 2021-11-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-15439, published 2018-11-08. Critical severity, CVSS 9.8. EPSS: 49.7% chance of exploitation in the next 30 days. A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user authentication mechanism of an affected device. The vulnerability…
CVE-2019-15993, published 2020-09-23. Medium severity, CVSS 5.3. EPSS: 10.3% chance of exploitation in the next 30 days. A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software…
CVE-2020-3297, published 2020-07-02. Critical severity, CVSS 9.8. EPSS: 3% chance of exploitation in the next 30 days. A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to defeat authentication…
CVE-2019-1806, published 2019-05-15. High severity, CVSS 7.7. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Small Business Sx200, Sx300, Sx500, ESW2 Series Managed Switches and Small Business Sx250, Sx350,…
CVE-2020-3363, published 2020-08-17. High severity, CVSS 8.6. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on…
CVE-2020-3496, published 2020-08-26. Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on…
CVE-2021-34739, published 2021-11-04. High severity, CVSS 8.1. EPSS: 1.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and…
CVE-2017-6720, published 2017-09-21. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting…
CVE-2017-12307, published 2018-01-18. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against…
CVE-2019-1859, published 2019-05-03. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to bypass client-side certificate authentication and revert to…

Latest

CVE-2019-12718, published 2019-10-16. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a…
CVE-2019-12636, published 2019-10-16. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF)…