Cisco Small Business 200 Series Smart Switches vulnerabilities

CVE-2021-34780 [HIGH] CWE-120 CVE-2021-34780: Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database corruption on the affected device For more information

CVE-2021-34779 [HIGH] CWE-120 CVE-2021-34779: Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database corruption on the affected device For more information

CVE-2021-34775 [MEDIUM] CWE-120 CVE-2021-34775: Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database corruption on the affected device For more informati

CVE-2021-34778 [MEDIUM] CWE-120 CVE-2021-34778: Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database corruption on the affected device For more informati

CVE-2021-34777 [MEDIUM] CWE-120 CVE-2021-34777: Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database corruption on the affected device For more informati

CVE-2021-34776 [MEDIUM] CWE-120 CVE-2021-34776: Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database corruption on the affected device For more informati

CVE-2020-3297 [CRITICAL] CWE-287 CVE-2020-3297: A vulnerability in session management for the web-based interface of Cisco Small Business Smart and A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to defeat authentication protections and gain unauthorized access to the management interface. The attacker could obtain the privileges of the highjacked session account, which could incl

CVE-2019-12718 [MEDIUM] CWE-79 CVE-2019-12718: A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based interface of the affected dev

CVE-2019-1859 [HIGH] CWE-285 CVE-2019-1859: A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches so A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to bypass client-side certificate authentication and revert to password authentication. The vulnerability exists because OpenSSH mishandles the authentication process. An attacker could exploit this vulnerability by attempti