CVE-2018-0407

N/A

Descripcion

A vulnerability in the web-based management interface of Cisco Small Business 300 Series (Sx300) Managed Switches could allow an authenticated, remote attacker to conduct a persistent cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or allow the attacker to access sensitive browser-based information. Cisco Bug IDs: CSCvi87326.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado8/1/2018

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

cisco:sf300-08cisco:sf300-08_firmwarecisco:sf300-24cisco:sf300-24_firmwarecisco:sf300-24mpcisco:sf300-24mp_firmwarecisco:sf300-24pcisco:sf300-24p_firmwarecisco:sf300-24ppcisco:sf300-24pp_firmwarecisco:sf300-48cisco:sf300-48_firmwarecisco:sf300-48pcisco:sf300-48p_firmwarecisco:sf300-48ppcisco:sf300-48pp_firmwarecisco:sf302-08cisco:sf302-08_firmwarecisco:sf302-08mpcisco:sf302-08mp_firmwarecisco:sf302-08mppcisco:sf302-08mpp_firmwarecisco:sf302-08pcisco:sf302-08p_firmwarecisco:sf302-08ppcisco:sf302-08pp_firmwarecisco:sg300-10cisco:sg300-10_firmwarecisco:sg300-10mpcisco:sg300-10mp_firmwarecisco:sg300-10mppcisco:sg300-10mpp_firmwarecisco:sg300-10pcisco:sg300-10p_firmwarecisco:sg300-10ppcisco:sg300-10pp_firmwarecisco:sg300-10sfpcisco:sg300-10sfp_firmwarecisco:sg300-20cisco:sg300-20_firmwarecisco:sg300-28cisco:sg300-28_firmwarecisco:sg300-28mpcisco:sg300-28mp_firmwarecisco:sg300-28pcisco:sg300-28p_firmwarecisco:sg300-28ppcisco:sg300-28pp_firmwarecisco:sg300-28sfpcisco:sg300-28sfp_firmwarecisco:sg300-52cisco:sg300-52_firmwarecisco:sg300-52mpcisco:sg300-52mp_firmwarecisco:sg300-52pcisco:sg300-52p_firmware

Debilidades (CWE)

CWE-79CWE-79

Referencias

http://www.securityfocus.com/bid/104947(psirt@cisco.com)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180801-sb-pxss(psirt@cisco.com)

http://www.securityfocus.com/bid/104947(af854a3a-2127-422b-91ae-364da2661108)

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180801-sb-pxss(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.