Cisco Sg300-28p Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Sg300-28p Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (32)

• CVE-2020-3297 — CVSS 9.8 (critical): A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an…
• CVE-2018-15439 — CVSS 9.8 (critical): A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user…
• CVE-2019-12636 — CVSS 8.8 (high): A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated…
• CVE-2023-20160 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2023-20159 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2023-20158 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2023-20157 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2023-20024 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2020-3363 — CVSS 8.6 (high): A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated…
• CVE-2023-20161 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2023-20189 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2023-20162 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2019-1814 — CVSS 8.6 (high): A vulnerability in the interactions between the DHCP and TFTP features for Cisco Small Business 300 Series (Sx300) Managed Switches could…
• CVE-2023-20156 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2021-34739 — CVSS 8.1 (high): A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2019-1806 — CVSS 7.7 (high): A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Small Business Sx200, Sx300, Sx500, ESW2…
• CVE-2020-3147 — CVSS 7.5 (high): A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to cause a denial of service…
• CVE-2019-1891 — CVSS 7.5 (high): A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated…
• CVE-2019-1892 — CVSS 7.5 (high): A vulnerability in the Secure Sockets Layer (SSL) input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches…
• CVE-2019-1859 — CVSS 7.2 (high): A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to…
• CVE-2017-6720 — CVSS 6.5 (medium): A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote…
• CVE-2017-12308 — CVSS 6.1 (medium): A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to…
• CVE-2017-12307 — CVSS 6.1 (medium): A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to…
• CVE-2019-12718 — CVSS 6.1 (medium): A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote…
• CVE-2018-0465 — CVSS 6.1 (medium): A vulnerability in the web-based management interface of Cisco Small Business 300 Series Managed Switches could allow an unauthenticated…
• CVE-2018-0407 — CVSS 5.4 (medium): A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could allow an…
• CVE-2018-0408 — CVSS 5.4 (medium): A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could allow an…
• CVE-2019-15993 — CVSS 5.3 (medium): A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device…
• CVE-2021-40127 — CVSS 5.3 (medium): A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series…
• CVE-2020-3496 — CVSS 5.3 (medium): A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated…
• CVE-2023-20188 — CVSS 4.8 (medium): A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series…
• CVE-2019-1943 — CVSS 4.7 (medium): A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated…