CVE-2019-1913 Cisco Small Business 220 Series Smart Switches Remote Code Execution Vulnerabilities

Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating system. The...

CVE-2019-1913

Cisco Small Business 220 Series Smart Switches are affected by CVE-2019-1913, a remote code execution vulnerability in the web management interface. The issue stems from insufficient validation of user input and improper boundary checks when reading data into an internal buffer, allowing an unaut...

CVE-2019-1914 Cisco Small Business 220 Series Smart Switches Command Injection Vulnerability

A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...

CVE-2019-1914 Cisco Small Business 220 Series Smart Switches Command Injection Vulnerability

A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...

CVE-2019-1914

CVE-2019-1914 affects Cisco Small Business 220 Series Smart Switches. It is a command-injection vulnerability in the web management interface caused by insufficient validation of user-supplied input. An authenticated attacker with a valid login (privilege level 15) could send a malicious request ...

CVE-2019-1912

The CVE-2019-1912 issue affects Cisco Small Business 220 Series Smart Switches where the web management interface fails to enforce proper authorization, allowing an unauthenticated attacker to upload arbitrary files. Exploitation involves sending crafted requests to web management endpoints (HTTP...

CVE-2019-1912 Cisco Small Business 220 Series Smart Switches Authentication Bypass Vulnerability

A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due to incomplete authorization checks in the web management interface. An attacker could exploit this...

CVE-2019-1912 Cisco Small Business 220 Series Smart Switches Authentication Bypass Vulnerability

A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due to incomplete authorization checks in the web management interface. An attacker could exploit this...

Cisco Small Business 220 Series Smart Switches Authorization Issues Vulnerability

Cisco Small Business 220 Series Smart Switches is a small smart switch device from Cisco USA. An authorization issue vulnerability exists in Cisco Small Business 220 Series Smart Switches. An attacker can exploit this vulnerability by sending a malicious request to upload arbitrary files...

Cisco Small Business 220 Series Smart Switches Input Validation Error Vulnerability

Cisco Small Business 220 Series Smart Switches is a small smart switch device from Cisco USA. An input validation error vulnerability exists in Cisco Small Business 220 Series Smart Switches. An attacker can exploit this vulnerability by sending a malicious HTTP or HTTPS request to execute...

Cisco Small Business 220 Series Smart Switches Buffer Overflow Vulnerability

Cisco Small Business 220 Series Smart Switches is a small smart switch device from Cisco USA. A buffer overflow vulnerability exists in Cisco Small Business 220 Series Smart Switches. An attacker can exploit this vulnerability by sending a malicious request to execute arbitrary code with root...

CVE-2019-1914: Improper Input Validation

A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...

CVE-2019-1913: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating system. The...

CVE-2019-1912: Improper Authorization

A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due to incomplete authorization checks in the web management interface. An attacker could exploit this...

Cisco Small Business 220 Series Smart Switches Remote Code Execution Vulnerabilities

Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root privileges on the underlying operating system. The...

Cisco Small Business 220 Series Smart Switches Command Injection Vulnerability

A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...

Cisco Small Business 220 Series Smart Switches Authentication Bypass Vulnerability

A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due to incomplete authorization checks in the web management interface. An attacker could exploit this...

QEMU: scsi-generic: possible OOB access while handling inquiry request

In QEMU 3.1, scsihandleinquiryreply in hw/scsi/scsi-generic.c allows out-of-bounds write and read operations...

PT-2019-2898

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 Series Smart Switches versions prior to 1.1.4.4 Description A vulnerability in the web management interface could allow an unauthenticated, remote attacker to upload arbitrary files due to incomplete authorization...

PT-2019-2897

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 Series affected versions not specified Description The issue is related to errors in input validation and buffer overflow in the memory, allowing a remote attacker to potentially elevate privileges and execute arbitrar...