Cisco Cbs250-24P-4X Firmware vulnerabilities

2 known vulnerabilities affecting cisco/cbs250-24p-4x_firmware.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH2

Vulnerabilities

Page 1 of 1

CVE-2024-20263HIGHCVSS 7.2≥ 3.4, < 3.4.0.17≥ 2.5, < 2.5.9.542024-01-26

CVE-2024-20263 [HIGH] CWE-284 CVE-2024-20263: A vulnerability with the access control list (ACL) management within a stacked switch configuration A vulnerability with the access control list (ACL) management within a stacked switch configuration of Cisco Business 250 Series Smart Switches and Business 350 Series Managed Switches could allow an unauthenticated, remote attacker to bypass protection offered by a configured ACL on an affected device. This vulnerability is due to incorrect processing

CVE-2021-34739HIGHCVSS 8.1≤ 3.12021-11-04

CVE-2021-34739 [HIGH] CWE-613 CVE-2021-34739: A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switch A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credent