All the vulnerabilites related to cisco - 300_series_managed_switch_firmware
cve-2016-1299
Vulnerability from cvelistv5
Published
2016-01-27 22:00
Modified
2024-08-05 22:48
Severity ?
EPSS score ?
Summary
The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a denial of service (HTTPS outage) via crafted HTTPS requests, aka Bug ID CSCuw87174.
References
▼ | URL | Tags |
---|---|---|
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-sbms | vendor-advisory, x_refsource_CISCO |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-05T22:48:13.655Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "name": "20160127 Cisco Small Business SG300 Managed Switch Web Framework GUI Function Denial of Service Vulnerability", "tags": [ "vendor-advisory", "x_refsource_CISCO", "x_transferred" ], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-sbms" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "n/a", "vendor": "n/a", "versions": [ { "status": "affected", "version": "n/a" } ] } ], "datePublic": "2016-01-27T00:00:00", "descriptions": [ { "lang": "en", "value": "The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a denial of service (HTTPS outage) via crafted HTTPS requests, aka Bug ID CSCuw87174." } ], "problemTypes": [ { "descriptions": [ { "description": "n/a", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2016-01-27T21:57:01", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco" }, "references": [ { "name": "20160127 Cisco Small Business SG300 Managed Switch Web Framework GUI Function Denial of Service Vulnerability", "tags": [ "vendor-advisory", "x_refsource_CISCO" ], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-sbms" } ], "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "psirt@cisco.com", "ID": "CVE-2016-1299", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "n/a", "version": { "version_data": [ { "version_value": "n/a" } ] } } ] }, "vendor_name": "n/a" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a denial of service (HTTPS outage) via crafted HTTPS requests, aka Bug ID CSCuw87174." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "n/a" } ] } ] }, "references": { "reference_data": [ { "name": "20160127 Cisco Small Business SG300 Managed Switch Web Framework GUI Function Denial of Service Vulnerability", "refsource": "CISCO", "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-sbms" } ] } } } }, "cveMetadata": { "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2016-1299", "datePublished": "2016-01-27T22:00:00", "dateReserved": "2016-01-04T00:00:00", "dateUpdated": "2024-08-05T22:48:13.655Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
Vulnerability from fkie_nvd
Published
2016-01-27 22:59
Modified
2024-11-21 02:46
Severity ?
Summary
The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a denial of service (HTTPS outage) via crafted HTTPS requests, aka Bug ID CSCuw87174.
References
Impacted products
Vendor | Product | Version | |
---|---|---|---|
cisco | 300_series_managed_switch_firmware | 1.4.1 | |
cisco | sf300-08 | * | |
cisco | sf300-24 | * | |
cisco | sf300-24mp | * | |
cisco | sf300-24p | * | |
cisco | sf300-24pp | * | |
cisco | sf300-48 | * | |
cisco | sf300-48p | * | |
cisco | sf300-48pp | * | |
cisco | sf302-08 | * | |
cisco | sf302-08mp | * | |
cisco | sf302-08mpp | * | |
cisco | sf302-08p | * | |
cisco | sf302-08pp | * | |
cisco | sg300-10 | * | |
cisco | sg300-10mp | * | |
cisco | sg300-10mpp | * | |
cisco | sg300-10p | * | |
cisco | sg300-10pp | * | |
cisco | sg300-10sfp | * | |
cisco | sg300-20 | * | |
cisco | sg300-28 | * | |
cisco | sg300-28mp | * | |
cisco | sg300-28p | * | |
cisco | sg300-28pp | * | |
cisco | sg300-52 | * | |
cisco | sg300-52mp | * | |
cisco | sg300-52p | * |
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:cisco:300_series_managed_switch_firmware:1.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "0A1354BD-4EBE-4DCE-B061-088FE90C72A6", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:cisco:sf300-08:*:*:*:*:*:*:*:*", "matchCriteriaId": "BD1FF561-DDB4-4EEB-B94E-B086C95DED0E", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sf300-24:*:*:*:*:*:*:*:*", "matchCriteriaId": "8EDD17F8-9246-4DA2-BA0D-3C599B992A78", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sf300-24mp:*:*:*:*:*:*:*:*", "matchCriteriaId": "2DF17618-ED20-4211-8B42-EB7CFA21FD2F", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sf300-24p:*:*:*:*:*:*:*:*", "matchCriteriaId": "76F9CED7-FEF5-475D-AC5C-B8BDF717428F", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sf300-24pp:*:*:*:*:*:*:*:*", "matchCriteriaId": "B12F4DFF-C758-4527-9DF6-779D58BA60E0", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sf300-48:*:*:*:*:*:*:*:*", "matchCriteriaId": "239838D3-BDA1-4E46-8C89-8AC591FF8A08", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sf300-48p:*:*:*:*:*:*:*:*", "matchCriteriaId": "303860EA-113B-4A2A-8E6B-6F78BE83F43D", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sf300-48pp:*:*:*:*:*:*:*:*", "matchCriteriaId": "0CF9609A-B31E-4333-BF81-0206A2C5F109", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sf302-08:*:*:*:*:*:*:*:*", "matchCriteriaId": "B369B76B-4646-47AB-994B-C286A4C9DA4C", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sf302-08mp:*:*:*:*:*:*:*:*", "matchCriteriaId": "C081885D-5780-49AB-9892-95050CCC82A1", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sf302-08mpp:*:*:*:*:*:*:*:*", "matchCriteriaId": "4F4CAABC-7AC4-4633-9E9C-83BD6CC72F50", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sf302-08p:*:*:*:*:*:*:*:*", "matchCriteriaId": "AE2C717B-530E-4CC2-BD08-CC5374D03EF9", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sf302-08pp:*:*:*:*:*:*:*:*", "matchCriteriaId": "2AD85B3E-9E2B-43BB-81C4-A1076588CA7E", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sg300-10:*:*:*:*:*:*:*:*", "matchCriteriaId": "9D921109-B496-4EAD-9973-82A3F3C4A04D", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sg300-10mp:*:*:*:*:*:*:*:*", "matchCriteriaId": "E775E9C1-2346-40AC-95DB-51B853656E7A", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sg300-10mpp:*:*:*:*:*:*:*:*", "matchCriteriaId": "D933957E-C037-41D8-816F-BB1DEE9F3800", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sg300-10p:*:*:*:*:*:*:*:*", "matchCriteriaId": "F0A6D158-5D25-4C02-AFDA-59225C38D3E4", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sg300-10pp:*:*:*:*:*:*:*:*", "matchCriteriaId": "40306F26-176A-46DB-AB8F-77009BAD5444", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sg300-10sfp:*:*:*:*:*:*:*:*", "matchCriteriaId": "964B81B3-D488-448C-9EBB-0AD4A31B9ABD", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sg300-20:*:*:*:*:*:*:*:*", "matchCriteriaId": "C7E3015E-BB9D-42E6-8EE2-B728B8BB877D", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sg300-28:*:*:*:*:*:*:*:*", "matchCriteriaId": "170FB2FB-BDE9-400B-82BE-80E54418FC7E", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sg300-28mp:*:*:*:*:*:*:*:*", "matchCriteriaId": "FAE0ECDE-64D6-49C4-9406-24473108B1B4", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sg300-28p:*:*:*:*:*:*:*:*", "matchCriteriaId": "7A1B6D87-C501-4A82-99CC-5FDE0BC9B0D3", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sg300-28pp:*:*:*:*:*:*:*:*", "matchCriteriaId": "BB018B21-D494-4C20-88EE-3D81E9C956C4", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sg300-52:*:*:*:*:*:*:*:*", "matchCriteriaId": "9C79BAC9-B707-426F-9647-8646AFF50212", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sg300-52mp:*:*:*:*:*:*:*:*", "matchCriteriaId": "0C5E6A36-11C7-41F0-BCE9-BB54762A7AF0", "vulnerable": false }, { "criteria": "cpe:2.3:h:cisco:sg300-52p:*:*:*:*:*:*:*:*", "matchCriteriaId": "C8816043-4271-4E56-9BF1-6702980DCA9B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a denial of service (HTTPS outage) via crafted HTTPS requests, aka Bug ID CSCuw87174." }, { "lang": "es", "value": "La implementaci\u00f3n de la GUI de gesti\u00f3n web en dispositivos Cisco Small Business SG300 1.4.1.x permite a atacantes remotos causar una denegaci\u00f3n de servicio (interrupci\u00f3n de HTTPS) a trav\u00e9s de peticiones manipuladas HTTPS, tambi\u00e9n conocida como Bug ID CSCuw87174." } ], "id": "CVE-2016-1299", "lastModified": "2024-11-21T02:46:08.590", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary" } ], "cvssMetricV30": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.0" }, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2016-01-27T22:59:02.677", "references": [ { "source": "ykramarz@cisco.com", "tags": [ "Vendor Advisory" ], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-sbms" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-sbms" } ], "sourceIdentifier": "ykramarz@cisco.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-399" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }