CVE-2020-3121: Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability
Published Jan 26, 2020
·Updated
A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link and access a specific page. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Affected Software
180 affected components
Cisco Sg250x-24 Firmware<=2.5.0.90
Cisco Sg250x-24
Cisco Sg250x-24p Firmware<=2.5.0.90
Cisco Sg250x-24p
Cisco Sg250x-48 Firmware<=2.5.0.90
Cisco Sg250x-48
Cisco Sg250x-48p Firmware<=2.5.0.90
Cisco Sg250x-48p
Cisco Sg250-08 Firmware<=2.5.0.90
Cisco Sg250-08
Cisco Sg250-08hp Firmware<=2.5.0.90
Cisco Sg250-08hp
Cisco Sg250-10p Firmware<=2.5.0.90
Cisco Sg250-10p
Cisco Sg250-18 Firmware<=2.5.0.90
Cisco Sg250-18
Cisco Sg250-26 Firmware<=2.5.0.90
Cisco Sg250-26
Cisco Sg250-26hp Firmware<=2.5.0.90
Cisco Sg250-26hp
Cisco Sg250-26p Firmware<=2.5.0.90
Cisco Sg250-26p
Cisco Sg250-50 Firmware<=2.5.0.90
Cisco Sg250-50
Cisco Sg250-50hp Firmware<=2.5.0.90
Cisco Sg250-50hp
Cisco Sg250-50p Firmware<=2.5.0.90
Cisco Sg250-50p
Cisco Sg250-24 Firmware<=2.5.0.90
Cisco Sg250-24
Cisco Sg250-24p Firmware<=2.5.0.90
Cisco Sg250-24p
Cisco Sg250-48 Firmware<=2.5.0.90
Cisco Sg250-48
Cisco Sg250-48hp Firmware<=2.5.0.90
Cisco Sg250-48hp
Cisco Sf350-48 Firmware<=2.5.0.90
Cisco Sf350-48
Cisco Sf350-48p Firmware<=2.5.0.90
Cisco Sf350-48p
Cisco Sf350-48mp Firmware<=2.5.0.90
Cisco Sf350-48mp
Cisco Sg350-10 Firmware<=2.5.0.90
Cisco Sg350-10
Cisco Sg350-10p Firmware<=2.5.0.90
Cisco Sg350-10p
Cisco Sg350-10mp Firmware<=2.5.0.90
Cisco Sg350-10mp
Cisco Sg355-10mp Firmware<=2.5.0.90
Cisco Sg355-10mp
Cisco Sg350-28 Firmware<=2.5.0.90
Cisco Sg350-28
Cisco Sg350-28p Firmware<=2.5.0.90
Cisco Sg350-28p
Cisco Sg350-28mp Firmware<=2.5.0.90
Cisco Sg350-28mp
Cisco Sx550x-16ft Firmware<=2.5.0.90
Cisco Sx550x-16ft
Cisco Sx550x-24ft Firmware<=2.5.0.90
Cisco Sx550x-24ft
Cisco Sx550x-12ft Firmware<=2.5.0.90
Cisco Sx550x-12ft
Cisco Sx550x-24 Firmware<=2.5.0.90
Cisco Sx550x-24
Cisco Sx550x-52 Firmware<=2.5.0.90
Cisco Sx550x-52
Cisco Sg550x-24 Firmware<=2.5.0.90
Cisco Sg550x-24
Cisco Sg550x-24p Firmware<=2.5.0.90
Cisco Sg550x-24p
Cisco Sg550x-24mp Firmware<=2.5.0.90
Cisco Sg550x-24mp
Cisco Sg550x-24mpp Firmware<=2.5.0.90
Cisco Sg550x-24mpp
Cisco Sg550x-48 Firmware<=2.5.0.90
Cisco Sg550x-48
Cisco Sg550x-48p Firmware<=2.5.0.90
Cisco Sg550x-48p
Cisco Sg550x-48mp Firmware<=2.5.0.90
Cisco Sg550x-48mp
Cisco Sf550x-24 Firmware<=2.5.0.90
Cisco Sf550x-24
Cisco Sf550x-24p Firmware<=2.5.0.90
Cisco Sf550x-24p
Cisco Sf550x-48 Firmware<=2.5.0.90
Cisco Sf550x-48
Cisco Sf550x-48p Firmware<=2.5.0.90
Cisco Sf550x-48p
Cisco Sf550x-48mp Firmware<=2.5.0.90
Cisco Sf550x-48mp
All of the following
Cisco Sg250x-24 Firmware<=2.5.0.90
Cisco Sg250x-24
All of the following
Cisco Sg250x-24p Firmware<=2.5.0.90
Cisco Sg250x-24p
All of the following
Cisco Sg250x-48 Firmware<=2.5.0.90
Cisco Sg250x-48
All of the following
Cisco Sg250x-48p Firmware<=2.5.0.90
Cisco Sg250x-48p
All of the following
Cisco Sg250-08 Firmware<=2.5.0.90
Cisco Sg250-08
All of the following
Cisco Sg250-08hp Firmware<=2.5.0.90
Cisco Sg250-08hp
All of the following
Cisco Sg250-10p Firmware<=2.5.0.90
Cisco Sg250-10p
All of the following
Cisco Sg250-18 Firmware<=2.5.0.90
Cisco Sg250-18
All of the following
Cisco Sg250-26 Firmware<=2.5.0.90
Cisco Sg250-26
All of the following
Cisco Sg250-26hp Firmware<=2.5.0.90
Cisco Sg250-26hp
All of the following
Cisco Sg250-26p Firmware<=2.5.0.90
Cisco Sg250-26p
All of the following
Cisco Sg250-50 Firmware<=2.5.0.90
Cisco Sg250-50
All of the following
Cisco Sg250-50hp Firmware<=2.5.0.90
Cisco Sg250-50hp
All of the following
Cisco Sg250-50p Firmware<=2.5.0.90
Cisco Sg250-50p
All of the following
Cisco Sg250-24 Firmware<=2.5.0.90
Cisco Sg250-24
All of the following
Cisco Sg250-24p Firmware<=2.5.0.90
Cisco Sg250-24p
All of the following
Cisco Sg250-48 Firmware<=2.5.0.90
Cisco Sg250-48
All of the following
Cisco Sg250-48hp Firmware<=2.5.0.90
Cisco Sg250-48hp
All of the following
Cisco Sf350-48 Firmware<=2.5.0.90
Cisco Sf350-48
All of the following
Cisco Sf350-48p Firmware<=2.5.0.90
Cisco Sf350-48p
All of the following
Cisco Sf350-48mp Firmware<=2.5.0.90
Cisco Sf350-48mp
All of the following
Cisco Sg350-10 Firmware<=2.5.0.90
Cisco Sg350-10
All of the following
Cisco Sg350-10p Firmware<=2.5.0.90
Cisco Sg350-10p
All of the following
Cisco Sg350-10mp Firmware<=2.5.0.90
Cisco Sg350-10mp
All of the following
Cisco Sg355-10mp Firmware<=2.5.0.90
Cisco Sg355-10mp
All of the following
Cisco Sg350-28 Firmware<=2.5.0.90
Cisco Sg350-28
All of the following
Cisco Sg350-28p Firmware<=2.5.0.90
Cisco Sg350-28p
All of the following
Cisco Sg350-28mp Firmware<=2.5.0.90
Cisco Sg350-28mp
All of the following
Cisco Sx550x-16ft Firmware<=2.5.0.90
Cisco Sx550x-16ft
All of the following
Cisco Sx550x-24ft Firmware<=2.5.0.90
Cisco Sx550x-24ft
All of the following
Cisco Sx550x-12ft Firmware<=2.5.0.90
Cisco Sx550x-12ft
All of the following
Cisco Sx550x-24 Firmware<=2.5.0.90
Cisco Sx550x-24
All of the following
Cisco Sx550x-52 Firmware<=2.5.0.90
Cisco Sx550x-52
All of the following
Cisco Sg550x-24 Firmware<=2.5.0.90
Cisco Sg550x-24
All of the following
Cisco Sg550x-24p Firmware<=2.5.0.90
Cisco Sg550x-24p
All of the following
Cisco Sg550x-24mp Firmware<=2.5.0.90
Cisco Sg550x-24mp
All of the following
Cisco Sg550x-24mpp Firmware<=2.5.0.90
Cisco Sg550x-24mpp
All of the following
Cisco Sg550x-48 Firmware<=2.5.0.90
Cisco Sg550x-48
All of the following
Cisco Sg550x-48p Firmware<=2.5.0.90
Cisco Sg550x-48p
All of the following
Cisco Sg550x-48mp Firmware<=2.5.0.90
Cisco Sg550x-48mp
All of the following
Cisco Sf550x-24 Firmware<=2.5.0.90
Cisco Sf550x-24
All of the following
Cisco Sf550x-24p Firmware<=2.5.0.90
Cisco Sf550x-24p
All of the following
Cisco Sf550x-48 Firmware<=2.5.0.90
Cisco Sf550x-48
All of the following
Cisco Sf550x-48p Firmware<=2.5.0.90
Cisco Sf550x-48p
All of the following
Cisco Sf550x-48mp Firmware<=2.5.0.90
Cisco Sf550x-48mp
Event History
Jan 26, 2020
CVE Published
via MITRE·04:31 AM
Data Sourced
via MITRE·04:31 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-3121?
The severity of CVE-2020-3121 is classified as medium due to its potential for Cross-Site Scripting (XSS) attacks.
2
How do I fix CVE-2020-3121?
To fix CVE-2020-3121, you should upgrade the affected Cisco Small Business Smart and Managed Switches firmware to versions beyond 2.5.0.90.
3
What devices are affected by CVE-2020-3121?
CVE-2020-3121 affects various Cisco products, including SG250, SG250X, SF350, SG350X, and Sx550 switch models running firmware version 2.5.0.90 or earlier.
4
Can CVE-2020-3121 be exploited remotely?
Yes, CVE-2020-3121 can be exploited remotely by an unauthenticated attacker through the web-based management interface.
5
What type of attack is associated with CVE-2020-3121?
CVE-2020-3121 is associated with Cross-Site Scripting (XSS) attacks, allowing attackers to execute arbitrary scripts in the user's browser.