CVE编号
CVE-2020-3121利用情况
暂无补丁情况
N/A披露时间
2020-01-26漏洞描述
Cisco Small Business Smart and Managed Switches是一个交换机解决方案。Cisco Small Business Smart and Managed Switches WEB接口存在跨站脚本，远程攻击者可利用该漏洞注入恶意脚本或HTML代码，当恶意数据被查看时，可获取敏感信息或劫持用户会话。
解决建议
目前厂商已发布升级补丁以修复漏洞，补丁获取链接：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200122-sbsms-xss
参考链接 |
|
|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-s... |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf350-48mp_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf350-48p_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf350-48_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf550x-24p_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf550x-24_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf550x-48mp_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf550x-48p_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf550x-48_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250-08hp_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250-08_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250-10p_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250-18_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250-24p_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250-24_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250-26hp_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250-26p_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250-26_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250-48hp_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250-48_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250-50hp_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250-50p_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250-50_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250x-24p_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250x-24_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250x-48p_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg250x-48_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350-10mp_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350-10p_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350-10_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350-28mp_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350-28p_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350-28_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg355-10mp_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg550x-24mpp_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg550x-24mp_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg550x-24p_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg550x-24_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg550x-48mp_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg550x-48p_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg550x-48_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sx550x-12ft_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sx550x-16ft_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sx550x-24ft_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sx550x-24_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sx550x-52_firmware | * |
Up to (including) 2.5.0.90 |
|||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf350-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf350-48mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf350-48p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf550x-24 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf550x-24p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf550x-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf550x-48mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf550x-48p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250-08 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250-08hp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250-10p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250-18 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250-24 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250-24p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250-26 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250-26hp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250-26p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250-48hp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250-50 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250-50hp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250-50p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250x-24 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250x-24p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250x-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg250x-48p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350-10 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350-10mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350-10p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350-28 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350-28mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350-28p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg355-10mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg550x-24 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg550x-24mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg550x-24mpp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg550x-24p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg550x-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg550x-48mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg550x-48p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sx550x-12ft | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sx550x-16ft | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sx550x-24 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sx550x-24ft | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sx550x-52 | - | - | |||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 无
- 影响范围 已更改
- 用户交互 需要
- 可用性 无
- 保密性 低
- 完整性 低
还没有评论，来说两句吧...