Cisco Sg350xg-24f Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Cisco Sg350xg-24f Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (20)

• CVE-2018-15439 — CVSS 9.8 (critical): A vulnerability in the Cisco Small Business Switches software could allow an unauthenticated, remote attacker to bypass the user…
• CVE-2020-3297 — CVSS 9.8 (critical): A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an…
• CVE-2023-20189 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2023-20159 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2023-20161 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2023-20157 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2023-20158 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2023-20160 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2020-3363 — CVSS 8.6 (high): A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated…
• CVE-2023-20162 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2023-20024 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2023-20156 — CVSS 8.6 (high): Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2021-34739 — CVSS 8.1 (high): A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated…
• CVE-2019-1859 — CVSS 7.2 (high): A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to…
• CVE-2017-6720 — CVSS 6.5 (medium): A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote…
• CVE-2017-12307 — CVSS 6.1 (medium): A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to…
• CVE-2017-12308 — CVSS 6.1 (medium): A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to…
• CVE-2024-20263 — CVSS 5.8 (medium): A vulnerability with the access control list (ACL) management within a stacked switch configuration of Cisco Business 250 Series Smart…
• CVE-2020-3496 — CVSS 5.3 (medium): A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated…
• CVE-2019-15993 — CVSS 5.3 (medium): A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device…