CVEvulnerability

CVE-2019-15993

5.3 MEDIUM Published 2020-09-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-09-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-16, CWE-287

Description

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web UI of an affected device. A successful exploit could allow the attacker to access sensitive device information, which includes configuration files.

Affected configurations

• cisco sg250x-24 firmware (< 2.5.0.92) • cisco sg250x-24p firmware (< 2.5.0.92) • cisco sg250x-48 firmware (< 2.5.0.92) • cisco sg250x-48p firmware (< 2.5.0.92) • cisco sg250-08 firmware (< 2.5.0.92) • cisco sg250-08hp firmware (< 2.5.0.92) • cisco sg250-10p firmware (< 2.5.0.92) • cisco sg250-18 firmware (< 2.5.0.92) • cisco sg250-26 firmware (< 2.5.0.92) • cisco sg250-26hp firmware (< 2.5.0.92) • cisco sg250-26p firmware (< 2.5.0.92) • cisco sg250-50 firmware (< 2.5.0.92) • cisco sg250-50hp firmware (< 2.5.0.92) • cisco sg250-50p firmware (< 2.5.0.92) • cisco sf250-24 firmware (< 2.5.0.92) • cisco sf250-24p firmware (< 2.5.0.92) • cisco sf250-48 firmware (< 2.5.0.92) • cisco sf250-48hp firmware (< 2.5.0.92) • cisco sg350-10 firmware (< 2.5.0.92) • cisco sg350-10p firmware (< 2.5.0.92) • cisco sg350-10mp firmware (< 2.5.0.92) • cisco sg355-10p firmware (< 2.5.0.92) • cisco sg350-28 firmware (< 2.5.0.92) • cisco sg350-28p firmware (< 2.5.0.92) • cisco sg350-28mp firmware (< 2.5.0.92) • cisco sf350-48 firmware (< 2.5.0.92) • cisco sf350-48p firmware (< 2.5.0.92) • cisco sf350-48mp firmware (< 2.5.0.92) • cisco sg350xg-2f10 firmware (< 2.5.0.92) • cisco sg350xg-24f firmware (< 2.5.0.92) • cisco sg350xg-24t firmware (< 2.5.0.92) • cisco sg350xg-48t firmware (< 2.5.0.92) • cisco sg350x-24 firmware (< 2.5.0.92) • cisco sg350x-24p firmware (< 2.5.0.92) • cisco sg350x-24mp firmware (< 2.5.0.92) • cisco sg350x-48 firmware (< 2.5.0.92) • cisco sg350x-48p firmware (< 2.5.0.92) • cisco sg350x-48mp firmware (< 2.5.0.92) • cisco sx550x-16ft firmware (< 2.5.0.92) • cisco sx550x-24ft firmware (< 2.5.0.92) • cisco sx550x-12f firmware (< 2.5.0.92) • cisco sx550x-24f firmware (< 2.5.0.92) • cisco sx550x-24 firmware (< 2.5.0.92) • cisco sx550x-52 firmware (< 2.5.0.92) • cisco sg550x-24 firmware (< 2.5.0.92) • cisco sg550x-24p firmware (< 2.5.0.92) • cisco sg550x-24mp firmware (< 2.5.0.92) • cisco sg550x-24mpp firmware (< 2.5.0.92) • cisco sg550x-48 firmware (< 2.5.0.92) • cisco sg550x-48p firmware (< 2.5.0.92) • cisco sg550x-48mp firmware (< 2.5.0.92) • cisco sf550x-24 firmware (< 2.5.0.92) • cisco sf550x-24p firmware (< 2.5.0.92) • cisco sf550x-24mp firmware (< 2.5.0.92) • cisco sf550x-48 firmware (< 2.5.0.92) • cisco sf550x-48p firmware (< 2.5.0.92) • cisco sf550x-48mp firmware (< 2.5.0.92) • cisco sg200-50 firmware (< 1.4.11.4) • cisco sg200-50p firmware (< 1.4.11.4) • cisco sg200-50fp firmware (< 1.4.11.4) … and 54 more

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References