Lucene search

K
nvd[email protected]NVD:CVE-2022-31734
HistoryJun 20, 2022 - 10:15 a.m.

CVE-2022-31734

2022-06-2010:15:07
CWE-79
web.nvd.nist.gov
3
cisco
catalyst 2940
switches
cross-site scripting
vulnerability
error page
firmware
retired

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

33.5%

Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc. contain a reflected cross-site scripting vulnerability regarding error page generation. An arbitrary script may be executed on the web browser of the user who is using the product. The affected firmware is prior to 12.2(50)SY released in 2011, and Cisco Catalyst 2940 Series Switches have been retired since January 2015

Affected configurations

Nvd
Node
ciscows-c2940-8tf-s_firmwareRange<12.2\(50\)sy
AND
ciscows-c2940-8tf-sMatch-
Node
ciscows-c2940-8tt-s_firmwareRange<12.2\(50\)sy
AND
ciscows-c2940-8tt-sMatch-
VendorProductVersionCPE
ciscows-c2940-8tf-s_firmware*cpe:2.3:o:cisco:ws-c2940-8tf-s_firmware:*:*:*:*:*:*:*:*
ciscows-c2940-8tf-s-cpe:2.3:h:cisco:ws-c2940-8tf-s:-:*:*:*:*:*:*:*
ciscows-c2940-8tt-s_firmware*cpe:2.3:o:cisco:ws-c2940-8tt-s_firmware:*:*:*:*:*:*:*:*
ciscows-c2940-8tt-s-cpe:2.3:h:cisco:ws-c2940-8tt-s:-:*:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

33.5%

Related for NVD:CVE-2022-31734