CPE Details
Cisco ESW2-350G-52DC Firmware 1.4.9.4
1.4.9.4
2020-10-08
12h37 +00:00
12h37 +00:00
2020-10-08
12h37 +00:00
12h37 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:o:cisco:esw2-350g-52dc_firmware:1.4.9.4:*:*:*:*:*:*:*
Informations
Vendor
ciscoProduct
esw2-350g-52dc_firmwareVersion
1.4.9.4Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges. | 8.1 |
High |
2025©
tesweb SA
