PT-2016-4818 · Cisco · Cisco Small Business 220

Publicado 2016-09-02 · Atualizado 2017-08-13 · CVE-2016-1470

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Small Business 220 devices with firmware before 1.0.1.1

Description A cross-site request forgery (CSRF) issue exists in the web-based management interface, allowing remote attackers to hijack the authentication of arbitrary users.

Recommendations For versions before 1.0.1.1, update the firmware to version 1.0.1.1 or later to resolve the issue.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2016-1470

Produtos afetados

Cisco Small Business 220

Referências · 6

• 🔥 http://synacktiv.com/ressources/advisories_cisco_switch_sg220_csrf.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2016-1470 · Aviso do Fabricante
• http://securitytracker.com/id/1036722 · Nota
• http://securityfocus.com/bid/92709 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-sps · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1470 · Nota de Segurança