Skip to content
fr Sign in
8.6 High

CVE-2023-20189 Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow…

Description

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

Affected products and versions

Product Affected versions Fixed in
Cisco Small Business Smart and Managed Switches Versions not published
250_series_smart_switches_firmware 2.5 earliest → < 2.5.9.16 2.5.9.16
350_series_managed_switches_firmware 2.5 earliest → < 2.5.9.16 2.5.9.16
350x_series_stackable_managed_switches_firmware 2.5 earliest → < 2.5.9.16 2.5.9.16
550x_series_stackable_managed_switches_firmware 2.5 earliest → < 2.5.9.16 2.5.9.16
business_250_series_smart_switches_firmware 3.3 earliest → < 3.3.0.16 3.3.0.16
business_350_series_managed_switches_firmware 3.3 earliest → < 3.3.0.16 3.3.0.16
small_business_200_series_smart_switches_firmware Versions not published
small_business_300_series_managed_switches_firmware Versions not published
Show the other branch
Product Affected versions Fixed in
small_business_500_series_stackable_managed_switches_firmware Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Small Business Smart and Managed Switches

The 14 CVEs of Cisco Small Business Smart and Managed Switches →
CVE-2026-20185 A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of&nbsp;Cisco 350 Series Managed Switches… 7.7 High CVE-2024-20263 A vulnerability with the access control list (ACL) management within a stacked switch configuration of Cisco Business… 5.8 Medium CVE-2023-20188 A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small… 4.8 Medium CVE-2023-20156 Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow… 8.6 High
Track this CVE