Sg220 26P Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:cisco:sg220-26p_firmware:*:*:*:*:*:*:*:*part: o version: * update: *
| Vendor | Cisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5) |
|---|---|
| Product | Sg220 26P Firmware (606b2975-de53-5c25-bed6-f7700a082099) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-1571 |
vulnerable | 2026-06-08 05:28:15.059282 |
Cisco Small Business 220 Series Smart Switches Vulnerabilities
HIGH (7.2)
Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting (XSS) attack Conduct an HTML injection attack For more information about these vulnerabilities, see the Details section of this advisory.
Published: 2021-06-16T17:45:12.098Z
Updated: 2024-11-07T22:08:40.015Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-1543 |
vulnerable | 2026-06-08 05:28:14.987187 |
Cisco Small Business 220 Series Smart Switches Vulnerabilities
HIGH (7.2)
Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting (XSS) attack Conduct an HTML injection attack For more information about these vulnerabilities, see the Details section of this advisory.
Published: 2021-06-16T17:45:46.371Z
Updated: 2024-11-07T22:08:03.454Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-1542 |
vulnerable | 2026-06-08 05:28:14.986042 |
Cisco Small Business 220 Series Smart Switches Vulnerabilities
HIGH (7.2)
Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting (XSS) attack Conduct an HTML injection attack For more information about these vulnerabilities, see the Details section of this advisory.
Published: 2021-06-16T17:45:51.976Z
Updated: 2024-11-07T22:07:56.420Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-1541 |
vulnerable | 2026-06-08 05:28:14.981424 |
Cisco Small Business 220 Series Smart Switches Vulnerabilities
HIGH (7.2)
Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting (XSS) attack Conduct an HTML injection attack For more information about these vulnerabilities, see the Details section of this advisory.
Published: 2021-06-16T17:35:34.689Z
Updated: 2024-11-07T22:08:46.480Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1914 |
vulnerable | 2026-06-08 05:13:29.995276 |
Cisco Small Business 220 Series Smart Switches Command Injection Vulnerability
HIGH (7.2)
A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a malicious request to certain parts of the web management interface. To send the malicious request, the attacker needs a valid login session in the web management interface as a privilege level 15 user. Depending on the configuration of the affected switch, the malicious request must be sent via HTTP or HTTPS. A successful exploit could allow the attacker to execute arbitrary shell commands with the privileges of the root user.
Published: 2019-08-07T05:50:11.911Z
Updated: 2024-11-20T17:14:57.430Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1913 |
vulnerable | 2026-06-08 05:13:29.994178 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-1912 |
vulnerable | 2026-06-08 05:13:29.986598 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.