Lucene search

[email protected]NVD:CVE-2020-3147

HistoryJan 30, 2020 - 7:15 p.m.

CVE-2020-3147

2020-01-3019:15:11

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

52.6%

JSON

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper validation of requests sent to the web interface. An attacker could exploit this vulnerability by sending a malicious request to the web interface of an affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition. This vulnerability affects firmware releases prior than 1.3.7.18

Affected configurations

Nvd

Node

ciscosg200-50_firmwareRange<1.3.7.18

AND

ciscosg200-50Match-

Node

ciscosg200-50p_firmwareRange<1.3.7.18

AND

ciscosg200-50pMatch-

Node

ciscosg200-50fp_firmwareRange<1.3.7.18

AND

ciscosg200-50fpMatch-

Node

ciscosg200-26_firmwareRange<1.3.7.18

AND

ciscosg200-26Match-

Node

ciscosg200-26p_firmwareRange<1.3.7.18

AND

ciscosg200-26pMatch-

Node

ciscosg200-26fp_firmwareRange<1.3.7.18

AND

ciscosg200-26fpMatch-

Node

ciscosg200-18_firmwareRange<1.3.7.18

AND

ciscosg200-18Match-

Node

ciscosg200-10fp_firmwareRange<1.3.7.18

AND

ciscosg200-10fpMatch-

Node

ciscosg200-08_firmwareRange<1.3.7.18

AND

ciscosg200-08Match-

Node

ciscosg200-08p_firmwareRange<1.3.7.18

AND

ciscosg200-08pMatch-

Node

ciscosg200-24_firmwareRange<1.3.7.18

AND

ciscosg200-24Match-

Node

ciscosg200-24p_firmwareRange<1.3.7.18

AND

ciscosg200-24pMatch-

Node

ciscosg200-24fp_firmwareRange<1.3.7.18

AND

ciscosg200-24fpMatch-

Node

ciscosg200-48_firmwareRange<1.3.7.18

AND

ciscosg200-48Match-

Node

ciscosg200-48p_firmwareRange<1.3.7.18

AND

ciscosg200-48pMatch-

Node

ciscosf302-08pp_firmwareRange<1.3.7.18

AND

ciscosf302-08ppMatch-

Node

ciscosf302-08mpp_firmwareRange<1.3.7.18

AND

ciscosf302-08mppMatch-

Node

ciscosg300-10pp_firmwareRange<1.3.7.18

AND

ciscosg300-10ppMatch-

Node

ciscosg300-10mpp_firmwareRange<1.3.7.18

AND

ciscosg300-10mppMatch-

Node

ciscosf300-24pp_firmwareRange<1.3.7.18

AND

ciscosf300-24ppMatch-

Node

ciscosf300-48pp_firmwareRange<1.3.7.18

AND

ciscosf300-48ppMatch-

Node

ciscosg300-28pp_firmwareRange<1.3.7.18

AND

ciscosg300-28ppMatch-

Node

ciscosf300-08_firmwareRange<1.3.7.18

AND

ciscosf300-08Match-

Node

ciscosf300-48p_firmwareRange<1.3.7.18

AND

ciscosf300-48pMatch-

Node

ciscosg300-10mp_firmwareRange<1.3.7.18

AND

ciscosg300-10mpMatch-

Node

ciscosg300-10p_firmwareRange<1.3.7.18

AND

ciscosg300-10pMatch-

Node

ciscosg300-10_firmwareRange<1.3.7.18

AND

ciscosg300-10Match-

Node

ciscosg300-28p_firmwareRange<1.3.7.18

AND

ciscosg300-28pMatch-

Node

ciscosf300-24p_firmwareRange<1.3.7.18

AND

ciscosf300-24pMatch-

Node

ciscosf302-08mp_firmwareRange<1.3.7.18

AND

ciscosf302-08mpMatch-

Node

ciscosg300-28_firmwareRange<1.3.7.18

AND

ciscosg300-28Match-

Node

ciscosf300-48_firmwareRange<1.3.7.18

AND

ciscosf300-48Match-

Node

ciscosg300-20_firmwareRange<1.3.7.18

AND

ciscosg300-20Match-

Node

ciscosf302-08p_firmwareRange<1.3.7.18

AND

ciscosf302-08pMatch-

Node

ciscosg300-52_firmwareRange<1.3.7.18

AND

ciscosg300-52Match-

Node

ciscosf300-24_firmwareRange<1.3.7.18

AND

ciscosf300-24Match-

Node

ciscosf302-08_firmwareRange<1.3.7.18

AND

ciscosf302-08Match-

Node

ciscosf300-24mp_firmwareRange<1.3.7.18

AND

ciscosf300-24mpMatch-

Node

ciscosg300-10sfp_firmwareRange<1.3.7.18

AND

ciscosg300-10sfpMatch-

Node

ciscosg300-28mp_firmwareRange<1.3.7.18

AND

ciscosg300-28mpMatch-

Node

ciscosg300-52p_firmwareRange<1.3.7.18

AND

ciscosg300-52pMatch-

Node

ciscosg300-52mp_firmwareRange<1.3.7.18

AND

ciscosg300-52mpMatch-

Node

ciscosg500-28mpp_firmwareRange<1.3.7.18

AND

ciscosg500-28mppMatch-

Node

ciscosg500-52mp_firmwareRange<1.3.7.18

AND

ciscosg500-52mpMatch-

Node

ciscosg500xg-8f8t_firmwareRange<1.3.7.18

AND

ciscosg500xg-8f8tMatch-

Node

ciscosf500-24_firmwareRange<1.3.7.18

AND

ciscosf500-24Match-

Node

ciscosf500-24p_firmwareRange<1.3.7.18

AND

ciscosf500-24pMatch-

Node

ciscosf500-48_firmwareRange<1.3.7.18

AND

ciscosf500-48Match-

Node

ciscosf500-48p_firmwareRange<1.3.7.18

AND

ciscosf500-48pMatch-

Node

ciscosg500-28_firmwareRange<1.3.7.18

AND

ciscosg500-28Match-

Node

ciscosg500-28p_firmwareRange<1.3.7.18

AND

ciscosg500-28pMatch-

Node

ciscosg500-52_firmwareRange<1.3.7.18

AND

ciscosg500-52Match-

Node

ciscosg500-52p_firmwareRange<1.3.7.18

AND

ciscosg500-52pMatch-

Node

ciscosg500x-24_firmwareRange<1.3.7.18

AND

ciscosg500x-24Match-

Node

ciscosg500x-24p_firmwareRange<1.3.7.18

AND

ciscosg500x-24pMatch-

Node

ciscosg500x-48_firmwareRange<1.3.7.18

AND

ciscosg500x-48Match-

Node

ciscosg500x-48p_firmwareRange<1.3.7.18

AND

ciscosg500x-48pMatch-

VendorProductVersionCPE
ciscosg200-50_firmware*cpe:2.3:o:cisco:sg200-50_firmware:*:*:*:*:*:*:*:*
ciscosg200-50-cpe:2.3:h:cisco:sg200-50:-:*:*:*:*:*:*:*
ciscosg200-50p_firmware*cpe:2.3:o:cisco:sg200-50p_firmware:*:*:*:*:*:*:*:*
ciscosg200-50p-cpe:2.3:h:cisco:sg200-50p:-:*:*:*:*:*:*:*
ciscosg200-50fp_firmware*cpe:2.3:o:cisco:sg200-50fp_firmware:*:*:*:*:*:*:*:*
ciscosg200-50fp-cpe:2.3:h:cisco:sg200-50fp:-:*:*:*:*:*:*:*
ciscosg200-26_firmware*cpe:2.3:o:cisco:sg200-26_firmware:*:*:*:*:*:*:*:*
ciscosg200-26-cpe:2.3:h:cisco:sg200-26:-:*:*:*:*:*:*:*
ciscosg200-26p_firmware*cpe:2.3:o:cisco:sg200-26p_firmware:*:*:*:*:*:*:*:*
ciscosg200-26p-cpe:2.3:h:cisco:sg200-26p:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	sg200-50_firmware	*	cpe:2.3:o:cisco:sg200-50_firmware::::::::
cisco	sg200-50	-	cpe:2.3:h:cisco:sg200-50:-:::::::*
cisco	sg200-50p_firmware	*	cpe:2.3:o:cisco:sg200-50p_firmware::::::::
cisco	sg200-50p	-	cpe:2.3:h:cisco:sg200-50p:-:::::::*
cisco	sg200-50fp_firmware	*	cpe:2.3:o:cisco:sg200-50fp_firmware::::::::
cisco	sg200-50fp	-	cpe:2.3:h:cisco:sg200-50fp:-:::::::*
cisco	sg200-26_firmware	*	cpe:2.3:o:cisco:sg200-26_firmware::::::::
cisco	sg200-26	-	cpe:2.3:h:cisco:sg200-26:-:::::::*
cisco	sg200-26p_firmware	*	cpe:2.3:o:cisco:sg200-26p_firmware::::::::
cisco	sg200-26p	-	cpe:2.3:h:cisco:sg200-26p:-:::::::*

Rows per page:

1-10 of 1141

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smlbus-switch-dos-R6VquS2u

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

52.6%

JSON

Related for NVD:CVE-2020-3147

prion1 cisco1 cvelist1 cve1 threatpost1