CVE-2017-12308
| Summary |
A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. This vulnerability affects the following Cisco Small Business 300 and 500 Series Managed Switches: Cisco 350 Series Managed Switches, Cisco 350X Series Stackable Managed Switches, Cisco 550X Series Stackable Managed Switches, Cisco ESW2 Series Advanced Switches, Cisco Small Business 300 Series Managed Switches, Cisco Small Business 500 Series Stackable Managed Switches. Cisco Bug IDs: CSCvg29980.
|
| Publication Date |
Jan. 18, 2018, 3:29 p.m. |
| Registration Date |
Jan. 26, 2021, 1:13 p.m. |
| Last Update |
Nov. 21, 2024, 12:09 p.m. |
|
CVSS3.1 : MEDIUM
|
| スコア |
6.1
|
| Vector |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| 攻撃元区分(AV) |
ネットワーク |
| 攻撃条件の複雑さ(AC) |
低 |
| 攻撃に必要な特権レベル(PR) |
不要 |
| 利用者の関与(UI) |
要 |
| 影響の想定範囲(S) |
変更あり |
| 機密性への影響(C) |
低 |
| 完全性への影響(I) |
低 |
| 可用性への影響(A) |
なし |
|
CVSS2.0 : MEDIUM
|
| Score |
5.8
|
| Vector |
AV:N/AC:M/Au:N/C:P/I:P/A:N |
| 攻撃元区分(AV) |
ネットワーク |
| 攻撃条件の複雑さ(AC) |
中 |
| 攻撃前の認証要否(Au) |
不要 |
| 機密性への影響(C) |
低 |
| 完全性への影響(I) |
低 |
| 可用性への影響(A) |
なし |
| Get all privileges. |
いいえ
|
| Get user privileges |
いいえ
|
| Get other privileges |
いいえ
|
| User operation required |
はい
|
Affected software configurations
| Configuration1 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg350-10_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg350-10:-:*:*:*:*:*:*:* |
| Configuration2 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg350-10p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg350-10p:-:*:*:*:*:*:*:* |
| Configuration3 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg350-10mp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg350-10mp:-:*:*:*:*:*:*:* |
| Configuration4 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg355-10p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg355-10p:-:*:*:*:*:*:*:* |
| Configuration5 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg350-28_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg350-28:-:*:*:*:*:*:*:* |
| Configuration6 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg350-28p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg350-28p:-:*:*:*:*:*:*:* |
| Configuration7 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg350-28mp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg350-28mp:-:*:*:*:*:*:*:* |
| Configuration8 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf350-48_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf350-48:-:*:*:*:*:*:*:* |
| Configuration9 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf350-48p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf350-48p:-:*:*:*:*:*:*:* |
| Configuration10 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf350-48mp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf350-48mp:-:*:*:*:*:*:*:* |
| Configuration11 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg350xg-2f10_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg350xg-2f10:-:*:*:*:*:*:*:* |
| Configuration12 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg350xg-24f_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg350xg-24f:-:*:*:*:*:*:*:* |
| Configuration13 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg350xg-24t_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg350xg-24t:-:*:*:*:*:*:*:* |
| Configuration14 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg350xg-48t_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg350xg-48t:-:*:*:*:*:*:*:* |
| Configuration15 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg350x-24_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg350x-24:-:*:*:*:*:*:*:* |
| Configuration16 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg350x-24p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg350x-24p:-:*:*:*:*:*:*:* |
| Configuration17 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg350x-24mp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg350x-24mp:-:*:*:*:*:*:*:* |
| Configuration18 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg350x-48_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg350x-48:-:*:*:*:*:*:*:* |
| Configuration19 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg350x-48p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg350x-48p:-:*:*:*:*:*:*:* |
| Configuration20 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg350x-48mp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg350x-48mp:-:*:*:*:*:*:*:* |
| Configuration21 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sx550x-16ft_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sx550x-16ft:-:*:*:*:*:*:*:* |
| Configuration22 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sx550x-24ft_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sx550x-24ft:-:*:*:*:*:*:*:* |
| Configuration23 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sx550x-12f_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sx550x-12f:-:*:*:*:*:*:*:* |
| Configuration24 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sx550x-24f_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sx550x-24f:-:*:*:*:*:*:*:* |
| Configuration25 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sx550x-24_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sx550x-24:-:*:*:*:*:*:*:* |
| Configuration26 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sx550x-52_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sx550x-52:-:*:*:*:*:*:*:* |
| Configuration27 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg550x-24_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg550x-24:-:*:*:*:*:*:*:* |
| Configuration28 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg550x-24p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg550x-24p:-:*:*:*:*:*:*:* |
| Configuration29 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg550x-24mp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg550x-24mp:-:*:*:*:*:*:*:* |
| Configuration30 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg550x-24mpp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg550x-24mpp:-:*:*:*:*:*:*:* |
| Configuration31 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg550x-48_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg550x-48:-:*:*:*:*:*:*:* |
| Configuration32 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg550x-48p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg550x-48p:-:*:*:*:*:*:*:* |
| Configuration33 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg550x-48mp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg550x-48mp:-:*:*:*:*:*:*:* |
| Configuration34 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf550x-24_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf550x-24:-:*:*:*:*:*:*:* |
| Configuration35 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf550x-24p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf550x-24p:-:*:*:*:*:*:*:* |
| Configuration36 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf550x-24mp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf550x-24mp:-:*:*:*:*:*:*:* |
| Configuration37 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf550x-48_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf550x-48:-:*:*:*:*:*:*:* |
| Configuration38 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf550x-48p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf550x-48p:-:*:*:*:*:*:*:* |
| Configuration39 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf550x-48mp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf550x-48mp:-:*:*:*:*:*:*:* |
| Configuration40 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:esw2-350g-52_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:esw2-350g-52:-:*:*:*:*:*:*:* |
| Configuration41 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:esw2-350g-52dc_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:esw2-350g-52dc:-:*:*:*:*:*:*:* |
| Configuration42 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:esw2-550x-48_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:esw2-550x-48:-:*:*:*:*:*:*:* |
| Configuration43 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:esw2-550x-48dc_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:esw2-550x-48dc:-:*:*:*:*:*:*:* |
| Configuration44 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf302-08pp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf302-08pp:-:*:*:*:*:*:*:* |
| Configuration45 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf302-08mpp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf302-08mpp:-:*:*:*:*:*:*:* |
| Configuration46 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg300-10pp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg300-10pp:-:*:*:*:*:*:*:* |
| Configuration47 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg300-10mpp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg300-10mpp:-:*:*:*:*:*:*:* |
| Configuration48 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf300-24pp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf300-24pp:-:*:*:*:*:*:*:* |
| Configuration49 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf300-48pp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf300-48pp:-:*:*:*:*:*:*:* |
| Configuration50 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg300-28pp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg300-28pp:-:*:*:*:*:*:*:* |
| Configuration51 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf300-08_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf300-08:-:*:*:*:*:*:*:* |
| Configuration52 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf300-48p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf300-48p:-:*:*:*:*:*:*:* |
| Configuration53 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg300-10mp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg300-10mp:-:*:*:*:*:*:*:* |
| Configuration54 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg300-10p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg300-10p:-:*:*:*:*:*:*:* |
| Configuration55 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg300-10_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg300-10:-:*:*:*:*:*:*:* |
| Configuration56 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg300-28p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg300-28p:-:*:*:*:*:*:*:* |
| Configuration57 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf300-24p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf300-24p:-:*:*:*:*:*:*:* |
| Configuration58 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf302-08mp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf302-08mp:-:*:*:*:*:*:*:* |
| Configuration59 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg300-28_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg300-28:-:*:*:*:*:*:*:* |
| Configuration60 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf300-48_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf300-48:-:*:*:*:*:*:*:* |
| Configuration61 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg300-20_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg300-20:-:*:*:*:*:*:*:* |
| Configuration62 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf302-08p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf302-08p:-:*:*:*:*:*:*:* |
| Configuration63 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg300-52_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg300-52:-:*:*:*:*:*:*:* |
| Configuration64 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf300-24_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf300-24:-:*:*:*:*:*:*:* |
| Configuration65 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf302-08_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf302-08:-:*:*:*:*:*:*:* |
| Configuration66 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf300-24mp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf300-24mp:-:*:*:*:*:*:*:* |
| Configuration67 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg300-10sfp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg300-10sfp:-:*:*:*:*:*:*:* |
| Configuration68 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg300-28mp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg300-28mp:-:*:*:*:*:*:*:* |
| Configuration69 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg300-52p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg300-52p:-:*:*:*:*:*:*:* |
| Configuration70 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg300-52mp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg300-52mp:-:*:*:*:*:*:*:* |
| Configuration71 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg500-28mpp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg500-28mpp:-:*:*:*:*:*:*:* |
| Configuration72 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg500-52mp_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg500-52mp:-:*:*:*:*:*:*:* |
| Configuration73 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg500xg-8f8t_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg500xg-8f8t:-:*:*:*:*:*:*:* |
| Configuration74 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf500-24_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf500-24:-:*:*:*:*:*:*:* |
| Configuration75 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf500-24p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf500-24p:-:*:*:*:*:*:*:* |
| Configuration76 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf500-48_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf500-48:-:*:*:*:*:*:*:* |
| Configuration77 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sf500-48p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sf500-48p:-:*:*:*:*:*:*:* |
| Configuration78 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg500-28_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg500-28:-:*:*:*:*:*:*:* |
| Configuration79 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg500-28p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg500-28p:-:*:*:*:*:*:*:* |
| Configuration80 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg500-52_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg500-52:-:*:*:*:*:*:*:* |
| Configuration81 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg500-52p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg500-52p:-:*:*:*:*:*:*:* |
| Configuration82 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg500x-24_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg500x-24:-:*:*:*:*:*:*:* |
| Configuration83 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg500x-24p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg500x-24p:-:*:*:*:*:*:*:* |
| Configuration84 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg500x-48_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg500x-48:-:*:*:*:*:*:*:* |
| Configuration85 |
or higher |
or less |
more than |
less than |
| cpe:2.3:o:cisco:sg500x-48p_firmware:*:*:*:*:*:*:*:* |
1.4.7.0 |
|
|
1.4.9.4 |
| execution environment |
| 1 |
cpe:2.3:h:cisco:sg500x-48p:-:*:*:*:*:*:*:* |
Related information, measures and tools
Common Vulnerabilities List
JVN Vulnerability Information
Cisco Small Business 300 シリーズおよび 500 シリーズマネージドスイッチのソフトウェアにおける HTTP レスポンス分割に関する脆弱性
| Title |
Cisco Small Business 300 シリーズおよび 500 シリーズマネージドスイッチのソフトウェアにおける HTTP レスポンス分割に関する脆弱性
|
| Summary |
Cisco Small Business 300 シリーズおよび 500 シリーズマネージドスイッチのソフトウェアには、HTTP レスポンス分割に関する脆弱性が存在します。 ベンダは、本脆弱性を Bug ID CSCvg29980 として公開しています。
|
| Possible impacts |
情報を取得される、および情報を改ざんされる可能性があります。 |
| Solution |
ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。 |
| Publication Date |
Aug. 3, 2017, midnight |
| Registration Date |
Feb. 22, 2018, 10:42 a.m. |
| Last Update |
Feb. 22, 2018, 10:42 a.m. |
Affected System
| シスコシステムズ |
|
Cisco 350 シリーズ マネージド スイッチ ファームウェア
|
|
Cisco 350X シリーズ スタッカブル マネージド スイッチ ファームウェア
|
|
Cisco 550X シリーズ スタッカブル マネージド スイッチ ファームウェア
|
|
Cisco ESW2 シリーズ拡張スイッチ ファームウェア
|
|
Cisco Small Business 300 シリーズ マネージド スイッチ ファームウェア
|
|
Cisco Small Business 500 シリーズ スタッカブル マネージド スイッチ ファームウェア
|
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
Change Log
| No |
Changed Details |
Date of change |
| 1 |
[2018年02月22日]
掲載 |
Feb. 22, 2018, 10:42 a.m. |