CVE-2017-12308
Severity
6.1MEDIUM
EPSS
0.2%
top 52.55%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 18
Latest updateMay 13
Description
A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request…
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7
Affected Packages86 packages
▶CVEListV5cisco_small_business_300_and_500_series_managed_switchesCisco Small Business 300 and 500 Series Managed Switches
🔴Vulnerability Details
2GHSA▶
GHSA-p8vw-8hj3-966h: A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an H↗2022-05-13
CVEList▶
CVE-2017-12308: A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an H↗2018-01-18
📋Vendor Advisories
1Cisco▶
Cisco Small Business 300 and 500 Series Managed Switches HTTP Response Splitting Vulnerability↗2018-01-18