CVE-2023-20156

High

Description

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

SeverityHigh
CVSS8.6
Exploit probability—
ProductCisco Business 250-16p-2g Firmware
PublishedMay 18, 2023
First seenMay 18, 2023
Weakness typeCWE-120CWE-120

How to fix

Affected products

ProductAffected versionsFixed in
cisco business_250-16p-2g_firmwareNo range specified—
cisco business_250-16t-2g_firmwareNo range specified—
cisco business_250-24fp-4g_firmwareNo range specified—
cisco business_250-24fp-4x_firmwareNo range specified—
cisco business_250-24p-4g_firmwareNo range specified—
cisco business_250-24p-4x_firmwareNo range specified—
cisco business_250-24pp-4g_firmwareNo range specified—
cisco business_250-24t-4g_firmwareNo range specified—
cisco business_250-24t-4x_firmwareNo range specified—
cisco business_250-48p-4g_firmwareNo range specified—
cisco business_250-48p-4x_firmwareNo range specified—
cisco business_250-48pp-4g_firmwareNo range specified—
cisco business_250-48t-4g_firmwareNo range specified—
cisco business_250-48t-4x_firmwareNo range specified—
cisco business_250-8fp-e-2g_firmwareNo range specified—
cisco business_250-8p-e-2g_firmwareNo range specified—
cisco business_250-8pp-d_firmwareNo range specified—
cisco business_250-8pp-e-2g_firmwareNo range specified—
cisco business_250-8t-d_firmwareNo range specified—
cisco business_250-8t-e-2g_firmwareNo range specified—
cisco business_350-12np-4x_firmwareNo range specified—
cisco business_350-12xs_firmwareNo range specified—
cisco business_350-12xt_firmwareNo range specified—
cisco business_350-16fp-2g_firmwareNo range specified—
cisco business_350-16p-2g_firmwareNo range specified—
cisco business_350-16p-e-2g_firmwareNo range specified—
cisco business_350-16t-2g_firmwareNo range specified—
cisco business_350-16t-e-2g_firmwareNo range specified—
cisco business_350-16xts_firmwareNo range specified—
cisco business_350-24fp-4g_firmwareNo range specified—
cisco business_350-24fp-4x_firmwareNo range specified—
cisco business_350-24mgp-4x_firmwareNo range specified—
cisco business_350-24ngp-4x_firmwareNo range specified—
cisco business_350-24p-4g_firmwareNo range specified—
cisco business_350-24p-4x_firmwareNo range specified—
cisco business_350-24s-4g_firmwareNo range specified—
cisco business_350-24t-4g_firmwareNo range specified—
cisco business_350-24t-4x_firmwareNo range specified—
cisco business_350-24xs_firmwareNo range specified—
cisco business_350-24xt_firmwareNo range specified—
cisco business_350-24xts_firmwareNo range specified—
cisco business_350-48fp-4g_firmwareNo range specified—
cisco business_350-48fp-4x_firmwareNo range specified—
cisco business_350-48ngp-4x_firmwareNo range specified—
cisco business_350-48p-4g_firmwareNo range specified—
cisco business_350-48p-4x_firmwareNo range specified—
cisco business_350-48t-4g_firmwareNo range specified—
cisco business_350-48t-4x_firmwareNo range specified—
cisco business_350-48xt-4x_firmwareNo range specified—
cisco business_350-8fp-2g_firmwareNo range specified—
cisco business_350-8fp-e-2g_firmwareNo range specified—
cisco business_350-8mgp-2x_firmwareNo range specified—
cisco business_350-8mp-2x_firmwareNo range specified—
cisco business_350-8p-2g_firmwareNo range specified—
cisco business_350-8p-e-2g_firmwareNo range specified—
cisco business_350-8s-e-2g_firmwareNo range specified—
cisco business_350-8t-e-2g_firmwareNo range specified—
cisco business_350-8xt_firmwareNo range specified—
cisco sf200-24_firmwareNo range specified—
cisco sf200-24fp_firmwareNo range specified—
cisco sf200-24p_firmwareNo range specified—
cisco sf200-48_firmwareNo range specified—
cisco sf200-48p_firmwareNo range specified—
cisco sf200e-24_firmwareNo range specified—
cisco sf200e-24p_firmwareNo range specified—
cisco sf200e-48_firmwareNo range specified—
cisco sf200e-48p_firmwareNo range specified—
cisco sf200e48p_firmwareNo range specified—
cisco sf250-08_firmwareNo range specified—
cisco sf250-08hp_firmwareNo range specified—
cisco sf250-10p_firmwareNo range specified—
cisco sf250-18_firmwareNo range specified—
cisco sf250-24_firmwareNo range specified—
cisco sf250-24p_firmwareNo range specified—
cisco sf250-26_firmwareNo range specified—
cisco sf250-26hp_firmwareNo range specified—
cisco sf250-26p_firmwareNo range specified—
cisco sf250-48_firmwareNo range specified—
cisco sf250-48hp_firmwareNo range specified—
cisco sf250-50_firmwareNo range specified—
cisco sf250-50hp_firmwareNo range specified—
cisco sf250-50p_firmwareNo range specified—
cisco sf250x-24_firmwareNo range specified—
cisco sf250x-24p_firmwareNo range specified—
cisco sf250x-48_firmwareNo range specified—
cisco sf250x-48p_firmwareNo range specified—
cisco sf300-08_firmwareNo range specified—
cisco sf300-24_firmwareNo range specified—
cisco sf300-24mp_firmwareNo range specified—
cisco sf300-24p_firmwareNo range specified—
cisco sf300-24pp_firmwareNo range specified—
cisco sf300-48_firmwareNo range specified—
cisco sf300-48p_firmwareNo range specified—
cisco sf300-48pp_firmwareNo range specified—
cisco sf302-08_firmwareNo range specified—
cisco sf302-08mpp_firmwareNo range specified—
cisco sf302-08pp_firmwareNo range specified—
cisco sf350-08_firmwareNo range specified—
cisco sf350-10_firmwareNo range specified—
cisco sf350-10mp_firmwareNo range specified—
cisco sf350-10p_firmwareNo range specified—
cisco sf350-10sfp_firmwareNo range specified—
cisco sf350-20_firmwareNo range specified—
cisco sf350-24_firmwareNo range specified—
cisco sf350-24mp_firmwareNo range specified—
cisco sf350-24p_firmwareNo range specified—
cisco sf350-28_firmwareNo range specified—
cisco sf350-28mp_firmwareNo range specified—
cisco sf350-28p_firmwareNo range specified—
cisco sf350-28sfp_firmwareNo range specified—
cisco sf350-48_firmwareNo range specified—
cisco sf350-48mp_firmwareNo range specified—
cisco sf350-48p_firmwareNo range specified—
cisco sf350-52_firmwareNo range specified—
cisco sf350-52mp_firmwareNo range specified—
cisco sf350-52p_firmwareNo range specified—
cisco sf350-8mp_firmwareNo range specified—
cisco sf350-8pd_firmwareNo range specified—
cisco sf352-08_firmwareNo range specified—
cisco sf352-08mp_firmwareNo range specified—
cisco sf352-08p_firmwareNo range specified—
cisco sf355-10p_firmwareNo range specified—
cisco sf500-18p_firmwareNo range specified—
cisco sf500-24_firmwareNo range specified—
cisco sf500-24mp_firmwareNo range specified—
cisco sf500-24p_firmwareNo range specified—
cisco sf500-48_firmwareNo range specified—
cisco sf500-48mp_firmwareNo range specified—
cisco sf500-48p_firmwareNo range specified—
cisco sf550x-24_firmwareNo range specified—
cisco sf550x-24mp_firmwareNo range specified—
cisco sf550x-24p_firmwareNo range specified—
cisco sf550x-48_firmwareNo range specified—
cisco sf550x-48mp_firmwareNo range specified—
cisco sf550x-48p_firmwareNo range specified—
cisco sg200-08_firmwareNo range specified—
cisco sg200-08p_firmwareNo range specified—
cisco sg200-10fp_firmwareNo range specified—
cisco sg200-18_firmwareNo range specified—
cisco sg200-26_firmwareNo range specified—
cisco sg200-26fp_firmwareNo range specified—
cisco sg200-26p_firmwareNo range specified—
cisco sg200-50_firmwareNo range specified—
cisco sg200-50fp_firmwareNo range specified—
cisco sg200-50p_firmwareNo range specified—
cisco sg250-08_firmwareNo range specified—
cisco sg250-08hp_firmwareNo range specified—
cisco sg250-10p_firmwareNo range specified—
cisco sg250-18_firmwareNo range specified—
cisco sg250-24_firmwareNo range specified—
cisco sg250-24p_firmwareNo range specified—
cisco sg250-26_firmwareNo range specified—
cisco sg250-26hp_firmwareNo range specified—
cisco sg250-26p_firmwareNo range specified—
cisco sg250-48_firmwareNo range specified—
cisco sg250-48hp_firmwareNo range specified—
cisco sg250-50_firmwareNo range specified—
cisco sg250-50hp_firmwareNo range specified—
cisco sg250-50p_firmwareNo range specified—
cisco sg250x-24_firmwareNo range specified—
cisco sg250x-24p_firmwareNo range specified—
cisco sg250x-48_firmwareNo range specified—
cisco sg250x-48p_firmwareNo range specified—
cisco sg300-10_firmwareNo range specified—
cisco sg300-10mp_firmwareNo range specified—
cisco sg300-10mpp_firmwareNo range specified—
cisco sg300-10p_firmwareNo range specified—
cisco sg300-10pp_firmwareNo range specified—
cisco sg300-10sfp_firmwareNo range specified—
cisco sg300-20_firmwareNo range specified—
cisco sg300-28_firmwareNo range specified—
cisco sg300-28mp_firmwareNo range specified—
cisco sg300-28p_firmwareNo range specified—
cisco sg300-28pp_firmwareNo range specified—
cisco sg300-28sfp_firmwareNo range specified—
cisco sg300-52_firmwareNo range specified—
cisco sg300-52mp_firmwareNo range specified—
cisco sg300-52p_firmwareNo range specified—
cisco sg350-10_firmwareNo range specified—
cisco sg350-10mp_firmwareNo range specified—
cisco sg350-10p_firmwareNo range specified—
cisco sg350-28_firmwareNo range specified—
cisco sg350-28mp_firmwareNo range specified—
cisco sg350-28p_firmwareNo range specified—
cisco sg350x-12pmv_firmwareNo range specified—
cisco sg350x-24_firmwareNo range specified—
cisco sg350x-24mp_firmwareNo range specified—
cisco sg350x-24p_firmwareNo range specified—
cisco sg350x-24pd_firmwareNo range specified—
cisco sg350x-24pv_firmwareNo range specified—
cisco sg350x-48_firmwareNo range specified—
cisco sg350x-48mp_firmwareNo range specified—
cisco sg350x-48p_firmwareNo range specified—
cisco sg350x-48pv_firmwareNo range specified—
cisco sg350x-8pmd_firmwareNo range specified—
cisco sg350xg-24f_firmwareNo range specified—
cisco sg350xg-24t_firmwareNo range specified—
cisco sg350xg-2f10_firmwareNo range specified—
cisco sg350xg-48t_firmwareNo range specified—
cisco sg355-10mp_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.