cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2021-34778,https://securityvulnerability.io/vulnerability/CVE-2021-34778,Cisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities,"Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database corruption on the affected device For more information about these vulnerabilities, see the Details section of this advisory. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). Cisco has released firmware updates that address these vulnerabilities.",Cisco,Cisco Small Business 200 Series Smart Switches,4.3,MEDIUM,0.000699999975040555,false,,false,false,true,2024-08-04T02:15:23.000Z,,false,false,,2021-10-06T00:00:00.000Z,0
CVE-2021-34777,https://securityvulnerability.io/vulnerability/CVE-2021-34777,Cisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities,"Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database corruption on the affected device For more information about these vulnerabilities, see the Details section of this advisory. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). Cisco has released firmware updates that address these vulnerabilities.",Cisco,Cisco Small Business 200 Series Smart Switches,4.3,MEDIUM,0.000699999975040555,false,,false,false,true,2024-08-04T02:15:23.000Z,,false,false,,2021-10-06T00:00:00.000Z,0
CVE-2021-34779,https://securityvulnerability.io/vulnerability/CVE-2021-34779,Cisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities,"Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database corruption on the affected device For more information about these vulnerabilities, see the Details section of this advisory. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). Cisco has released firmware updates that address these vulnerabilities.",Cisco,Cisco Small Business 200 Series Smart Switches,4.3,MEDIUM,0.0008500000112690032,false,,false,false,true,2024-08-04T02:15:24.000Z,,false,false,,2021-10-06T00:00:00.000Z,0
CVE-2021-34780,https://securityvulnerability.io/vulnerability/CVE-2021-34780,Cisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities,"Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database corruption on the affected device For more information about these vulnerabilities, see the Details section of this advisory. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). Cisco has released firmware updates that address these vulnerabilities.",Cisco,Cisco Small Business 200 Series Smart Switches,4.3,MEDIUM,0.0008500000112690032,false,,false,false,true,2024-08-04T02:15:24.000Z,,false,false,,2021-10-06T00:00:00.000Z,0
CVE-2021-34775,https://securityvulnerability.io/vulnerability/CVE-2021-34775,Cisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities,"Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database corruption on the affected device For more information about these vulnerabilities, see the Details section of this advisory. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). Cisco has released firmware updates that address these vulnerabilities.",Cisco,Cisco Small Business 200 Series Smart Switches,4.3,MEDIUM,0.000699999975040555,false,,false,false,true,2024-08-04T02:15:23.000Z,,false,false,,2021-10-06T00:00:00.000Z,0
CVE-2021-34776,https://securityvulnerability.io/vulnerability/CVE-2021-34776,Cisco Small Business 220 Series Smart Switches Link Layer Discovery Protocol Vulnerabilities,"Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business 220 Series Smart Switches. An unauthenticated, adjacent attacker could perform the following: Execute code on the affected device or cause it to reload unexpectedly Cause LLDP database corruption on the affected device For more information about these vulnerabilities, see the Details section of this advisory. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent). Cisco has released firmware updates that address these vulnerabilities.",Cisco,Cisco Small Business 200 Series Smart Switches,4.3,MEDIUM,0.000699999975040555,false,,false,false,true,2024-08-04T02:15:23.000Z,,false,false,,2021-10-06T00:00:00.000Z,0
CVE-2020-3297,https://securityvulnerability.io/vulnerability/CVE-2020-3297,Cisco Small Business Smart and Managed Switches Session Management Vulnerability,"A vulnerability in session management for the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to defeat authentication protections and gain unauthorized access to the management interface. The attacker could obtain the privileges of the highjacked session account, which could include administrator privileges on the device. The vulnerability is due to the use of weak entropy generation for session identifier values. An attacker could exploit this vulnerability to determine a current session identifier through brute force and reuse that session identifier to take over an ongoing session. In this way, an attacker could take actions within the management interface with privileges up to the level of the administrative user.",Cisco,Cisco Small Business 200 Series Smart Switches,8.1,HIGH,0.006209999788552523,false,,false,false,true,2024-08-04T08:16:34.000Z,,false,false,,2020-07-02T05:15:00.000Z,0
CVE-2019-12718,https://securityvulnerability.io/vulnerability/CVE-2019-12718,Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability,"A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link and subsequently access a specific web interface page. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.",Cisco,Cisco Small Business 200 Series Smart Switches,6.1,MEDIUM,0.001509999972768128,false,,false,false,true,2024-09-17T05:17:51.000Z,,false,false,,2019-10-16T00:00:00.000Z,0
CVE-2019-1859,https://securityvulnerability.io/vulnerability/CVE-2019-1859,Cisco Small Business Switches Secure Shell Certificate Authentication Bypass Vulnerability,"A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to bypass client-side certificate authentication and revert to password authentication. The vulnerability exists because OpenSSH mishandles the authentication process. An attacker could exploit this vulnerability by attempting to connect to the device via SSH. A successful exploit could allow the attacker to access the configuration as an administrative user if the default credentials are not changed. There are no workarounds available; however, if client-side certificate authentication is enabled, disable it and use strong password authentication. Client-side certificate authentication is disabled by default.",Cisco,Cisco Small Business 200 Series Smart Switches,7.2,HIGH,0.0010400000028312206,false,,false,false,true,2024-08-04T19:16:14.000Z,,false,false,,2019-05-03T17:29:00.000Z,0