CVE-2023-20156CWE-120

Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

High · published May 18, 2023

CVSS v3.1
8.6
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01183 · 67.5th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2023-05-18T00:00Z
EPSS history
Timeline
  • 18 MAY 00:00Z
    Cisco Small Business Series Switches Buffer Overflow Vulnerabilities
    cvelistv5