CVE-2016-1472

The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service interface outage via a crafted HTTP request, aka Bug ID CSCuz76238...

CVE-2016-1472

The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service interface outage via a crafted HTTP request, aka Bug ID CSCuz76238...

CVE-2016-1471

Cross-site scripting XSS vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232...

CVE-2016-1471

Cross-site scripting XSS vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232...

Hardcoded credentials

Cisco Small Business 220 devices with firmware before 1.0.1.1 have a hardcoded SNMP community, which allows remote attackers to read or modify SNMP objects by leveraging knowledge of this community, aka Bug ID CSCuz76216...

CVE-2016-1470

Cross-site request forgery CSRF vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230...

Design/Logic Flaw

The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service interface outage via a crafted HTTP request, aka Bug ID CSCuz76238...

CVE-2016-1470

Cross-site request forgery CSRF vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230...

Cross site scripting

Cross-site scripting XSS vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230...

CVE-2016-1473

CVE-2016-1473 affects Cisco Small Business 220 Series Smart Plus Switches (Sx220) running firmware prior to 1.0.1.1, which ships with a hardcoded default SNMP community that allows unauthenticated remote access to read/modify SNMP objects. The underlying issue is the presence of a default SNMP co...

CVE-2016-1472

The CVE-2016-1472 issue affects Cisco Small Business 220 Series Smart Plus Switches (Sx220) with firmware prior to 1.0.1.1. The vulnerability resides in the web-based management interface where insufficient validation of HTTP requests allows an unauthenticated, remote attacker to cause the web UI...

CVE-2016-1471

CVE-2016-1471 describes a Cross-site Scripting (XSS) vulnerability in the web-based management interface of Cisco Small Business 220 Series Smart Plus Switches (Sx220) with firmware prior to 1.0.1.1. The root cause is insufficient validation of user-supplied input in the web interface, allowing a...

CVE-2016-1472

The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service interface outage via a crafted HTTP request, aka Bug ID CSCuz76238...

Cisco Small Business 220 Series Smart Plus Switches Denial of Service Vulnerability

Cisco Small Business 220 Series Smart Plus Switches is a 220 Series stackable managed switch product from Cisco USA. A denial of service vulnerability exists in Cisco Small Business 220 Series Smart Plus Switches. An attacker could exploit this vulnerability to cause a denial of service...

CVE-2016-1473

Cisco Small Business 220 devices with firmware before 1.0.1.1 have a hardcoded SNMP community, which allows remote attackers to read or modify SNMP objects by leveraging knowledge of this community, aka Bug ID CSCuz76216...

Cisco Small Business 220 Series Smart Plus Switches Cross-Site Request Forgery Vulnerability

Cisco Small Business 220 Series Smart Plus Switches is a 220 Series stackable managed switch product from Cisco USA. A cross-site request forgery vulnerability exists in Cisco Small Business 220 Series Smart Plus Switches. An attacker could exploit this vulnerability to perform unauthorized...

CVE-2016-1470

Cross-site request forgery CSRF vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230...

CVE-2016-1470

CVE-2016-1470 describes a cross-site request forgery (CSRF) in the web-based management interface of Cisco Small Business 220 Series Smart Plus Switches. Affected devices run firmware prior to 1.0.1.1. The root cause is insufficient CSRF protections, allowing an unauthenticated or remote attacker...

CVE-2016-1471

Cross-site scripting XSS vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232...