First published: Thu Nov 04 2021(Updated: )
A vulnerability in the web-based management interface of multiple Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to replay valid user session credentials and gain unauthorized access to the web-based management interface of an affected device. This vulnerability is due to insufficient expiration of session credentials. An attacker could exploit this vulnerability by conducting a man-in-the-middle attack against an affected device to intercept valid session credentials and then replaying the intercepted credentials toward the same device at a later time. A successful exploit could allow the attacker to access the web-based management interface with administrator privileges.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco Sf250-24 Firmware | <=2.5 | |
Cisco Sf250-24 | ||
Cisco Sf250-24p Firmware | <=2.5 | |
Cisco Sf250-24p | ||
Cisco Sf250-48 Firmware | <=2.5 | |
Cisco Sf250-48 | ||
Cisco Sf250-48hp Firmware | <=2.5 | |
Cisco Sf250-48hp | ||
Cisco Sf250-08 Firmware | <=2.5 | |
Cisco Sf250-08 | ||
Cisco Sf250-08hp Firmware | <=2.5 | |
Cisco Sf250-08hp | ||
Cisco Sf250-10p Firmware | <=2.5 | |
Cisco Sf250-10p | ||
Cisco Sf250-18 Firmware | <=2.5 | |
Cisco Sf250-18 | ||
Cisco Sf250-26 Firmware | <=2.5 | |
Cisco Sf250-26 | ||
Cisco Sf250-26hp Firmware | <=2.5 | |
Cisco Sf250-26hp | ||
Cisco Sf250-26p Firmware | <=2.5 | |
Cisco Sf250-26p | ||
Cisco Sf250-50 Firmware | <=2.5 | |
Cisco Sf250-50 | ||
Cisco Sf250-50hp Firmware | <=2.5 | |
Cisco Sf250-50hp | ||
Cisco Sf250-50p Firmware | <=2.5 | |
Cisco Sf250-50p | ||
Cisco Sf250x-24 Firmware | <=2.5 | |
Cisco Sf250x-24 | ||
Cisco Sf250x-24p Firmware | <=2.5 | |
Cisco Sf250x-24p | ||
Cisco Sf250x-48 Firmware | <=2.5 | |
Cisco Sf250x-48 | ||
Cisco Sf250x-48p Firmware | <=2.5 | |
Cisco Sf250x-48p | ||
Cisco Sf350-08 Firmware | <=2.5 | |
Cisco Sf350-08 | ||
Cisco Sf350-24 Firmware | <=2.5 | |
Cisco Sf350-24 | ||
Cisco Sf350-24mp Firmware | <=2.5 | |
Cisco Sf350-24mp | ||
Cisco Sf350-24p Firmware | <=2.5 | |
Cisco Sf350-24p | ||
Cisco Sf350-48 Firmware | <=2.5 | |
Cisco Sf350-48 | ||
Cisco Sf350-8mp Firmware | <=2.5 | |
Cisco Sf350-8mp | ||
Cisco Sf350-48p Firmware | <=2.5 | |
Cisco Sf350-48p | ||
Cisco Sf352-08 Firmware | <=2.5 | |
Cisco Sf352-08 | ||
Cisco Sf352-08mp Firmware | <=2.5 | |
Cisco Sf352-08mp | ||
Cisco Sf352-08p Firmware | <=2.5 | |
Cisco Sf352-08p | ||
Cisco Sf350-8pd Firmware | <=2.5 | |
Cisco Sf350-8pd | ||
Cisco Sf350-10 Firmware | <=2.5 | |
Cisco Sf350-10 | ||
Cisco Sf350-10mp Firmware | <=2.5 | |
Cisco Sf350-10mp | ||
Cisco Sf350-10p Firmware | <=2.5 | |
Cisco Sf350-10p | ||
Cisco Sf350-10sfp Firmware | <=2.5 | |
Cisco Sf350-10sfp | ||
Cisco Sf350-20 Firmware | <=2.5 | |
Cisco Sf350-20 | ||
Cisco Sf350-28 Firmware | <=2.5 | |
Cisco Sf350-28 | ||
Cisco Sf350-28mp Firmware | <=2.5 | |
Cisco Sf350-28mp | ||
Cisco Sf350-28p Firmware | <=2.5 | |
Cisco Sf350-28p | ||
Cisco Sf350-28sfp Firmware | <=2.5 | |
Cisco Sf350-28sfp | ||
Cisco Sf350-52 Firmware | <=2.5 | |
Cisco Sf350-52 | ||
Cisco Sf350-52mp Firmware | <=2.5 | |
Cisco Sf350-52mp | ||
Cisco Sf350-52p Firmware | <=2.5 | |
Cisco Sf350-52p | ||
Cisco Sf355-10p Firmware | <=2.5 | |
Cisco Sf355-10p | ||
Cisco Sg350x-8pmd Firmware | <=2.5 | |
Cisco Sg350x-8pmd | ||
Cisco Sg350x-12pmv Firmware | <=2.5 | |
Cisco Sg350x-12pmv | ||
Cisco Sg350x-24 Firmware | <=2.5 | |
Cisco Sg350x-24 | ||
Cisco Sg350x-24p Firmware | <=2.5 | |
Cisco Sg350x-24p | ||
Cisco Sg350x-24mp Firmware | <=2.5 | |
Cisco Sg350x-24mp | ||
Cisco Sg350x-24pd Firmware | <=2.5 | |
Cisco Sg350x-24pd | ||
Cisco Sg350x-24pv Firmware | <=2.5 | |
Cisco Sg350x-24pv | ||
Cisco Sg350x-48 Firmware | <=2.5 | |
Cisco Sg350x-48 | ||
Cisco Sg350x-48p Firmware | <=2.5 | |
Cisco Sg350x-48p | ||
Cisco Sg350x-48mp Firmware | <=2.5 | |
Cisco Sg350x-48mp | ||
Cisco Sg350x-48pv Firmware | <=2.5 | |
Cisco Sg350x-48pv | ||
Cisco Sg350xg-2f10 Firmware | <=2.5 | |
Cisco Sg350xg-2f10 | ||
Cisco Sg350xg-24f Firmware | <=2.5 | |
Cisco Sg350xg-24f | ||
Cisco Sg350xg-24t Firmware | <=2.5 | |
Cisco Sg350xg-24t | ||
Cisco Sg350xg-48t Firmware | <=2.5 | |
Cisco Sg350xg-48t | ||
Cisco Sx350x-08 Firmware | <=2.5 | |
Cisco Sx350x-08 | ||
Cisco Sx350x-12 Firmware | <=2.5 | |
Cisco Sx350x-12 | ||
Cisco Sx350x-24f Firmware | <=2.5 | |
Cisco Sx350x-24f | ||
Cisco Sx350x-24 Firmware | <=2.5 | |
Cisco Sx350x-24 | ||
Cisco Sx350x-52 Firmware | <=2.5 | |
Cisco Sx350x-52 | ||
Cisco Sf550x-24 Firmware | <=2.5 | |
Cisco Sf550x-24 | ||
Cisco Sf550x-24p Firmware | <=2.5 | |
Cisco Sf550x-24p | ||
Cisco Sf550x-24mp Firmware | <=2.5 | |
Cisco Sf550x-24mp | ||
Cisco Sf550x-48 Firmware | <=2.5 | |
Cisco Sf550x-48 | ||
Cisco Sf550x-48p Firmware | <=2.5 | |
Cisco Sf550x-48p | ||
Cisco Sf550x-48mp Firmware | <=2.5 | |
Cisco Sf550x-48mp | ||
Cisco Sg550x-24 Firmware | <=2.5 | |
Cisco Sg550x-24 | ||
Cisco Sg550x-24p Firmware | <=2.5 | |
Cisco Sg550x-24p | ||
Cisco Sg550x-24mp Firmware | <=2.5 | |
Cisco Sg550x-24mp | ||
Cisco Sg550x-24mpp Firmware | <=2.5 | |
Cisco Sg550x-24mpp | ||
Cisco Sg550x-48 Firmware | <=2.5 | |
Cisco Sg550x-48 | ||
Cisco Sg550x-48p Firmware | <=2.5 | |
Cisco Sg550x-48p | ||
Cisco Sg550x-48mp Firmware | <=2.5 | |
Cisco Sg550x-48mp | ||
Cisco Sg550xg-8f8t Firmware | <=2.5 | |
Cisco Sg550xg-8f8t | ||
Cisco Sg550xg-24f Firmware | <=2.5 | |
Cisco Sg550xg-24f | ||
Cisco Sg550xg-24t Firmware | <=2.5 | |
Cisco Sg550xg-24t | ||
Cisco Sg550xg-48t Firmware | <=2.5 | |
Cisco Sg550xg-48t | ||
Cisco Sx550x-12f Firmware | <=2.5 | |
Cisco Sx550x-12f | ||
Cisco Sx550x-16ft Firmware | <=2.5 | |
Cisco Sx550x-16ft | ||
Cisco Sx550x-24ft Firmware | <=2.5 | |
Cisco Sx550x-24ft | ||
Cisco Sx550x-24f Firmware | <=2.5 | |
Cisco Sx550x-24f | ||
Cisco Sx550x-24 Firmware | <=2.5 | |
Cisco Sx550x-24 | ||
Cisco Sx550x-52 Firmware | <=2.5 | |
Cisco Sx550x-52 | ||
Cisco Cbs250-8t-d Firmware | <=3.1 | |
Cisco Cbs250-8t-d | ||
Cisco Cbs250-8pp-d Firmware | <=3.1 | |
Cisco Cbs250-8pp-d | ||
Cisco Cbs250-8t-e-2g Firmware | <=3.1 | |
Cisco Cbs250-8t-e-2g | ||
Cisco Cbs250-8pp-e-2g Firmware | <=3.1 | |
Cisco Cbs250-8pp-e-2g | ||
Cisco Cbs250-8p-e-2g Firmware | <=3.1 | |
Cisco Cbs250-8p-e-2g | ||
Cisco Cbs250-8fp-e-2g Firmware | <=3.1 | |
Cisco Cbs250-8fp-e-2g | ||
Cisco Cbs250-16t-2g Firmware | <=3.1 | |
Cisco Cbs250-16t-2g | ||
Cisco Cbs250-16p-2g Firmware | <=3.1 | |
Cisco Cbs250-16p-2g | ||
Cisco Cbs250-24t-4g Firmware | <=3.1 | |
Cisco Cbs250-24t-4g | ||
Cisco Cbs250-24pp-4g Firmware | <=3.1 | |
Cisco Cbs250-24pp-4g | ||
Cisco Cbs250-24p-4g Firmware | <=3.1 | |
Cisco Cbs250-24p-4g | ||
Cisco Cbs250-24fp-4g Firmware | <=3.1 | |
Cisco Cbs250-24fp-4g | ||
Cisco Cbs250-48t-4g Firmware | <=3.1 | |
Cisco Cbs250-48t-4g | ||
Cisco Cbs250-48pp-4g Firmware | <=3.1 | |
Cisco Cbs250-48pp-4g | ||
Cisco Cbs250-48p-4g Firmware | <=3.1 | |
Cisco Cbs250-48p-4g | ||
Cisco Cbs250-24t-4x Firmware | <=3.1 | |
Cisco Cbs250-24t-4x | ||
Cisco Cbs250-24p-4x Firmware | <=3.1 | |
Cisco Cbs250-24p-4x | ||
Cisco Cbs250-24fp-4x Firmware | <=3.1 | |
Cisco Cbs250-24fp-4x | ||
Cisco Cbs250-48t-4x Firmware | <=3.1 | |
Cisco Cbs250-48t-4x | ||
Cisco Cbs250-48p-4x Firmware | <=3.1 | |
Cisco Cbs250-48p-4x | ||
Cisco Cbs350-8t-e-2g Firmware | <=3.1 | |
Cisco Cbs350-8t-e-2g | ||
Cisco Cbs350-8p-2g Firmware | <=3.1 | |
Cisco Cbs350-8p-2g | ||
Cisco Cbs350-8p-e-2g Firmware | <=3.1 | |
Cisco Cbs350-8p-e-2g | ||
Cisco Cbs350-8fp-2g Firmware | <=3.1 | |
Cisco Cbs350-8fp-2g | ||
Cisco Cbs350-8fp-e-2g Firmware | <=3.1 | |
Cisco Cbs350-8fp-e-2g | ||
Cisco Cbs350-8s-e-2g Firmware | <=3.1 | |
Cisco Cbs350-8s-e-2g | ||
Cisco Cbs350-16t-2g Firmware | <=3.1 | |
Cisco Cbs350-16t-2g | ||
Cisco Cbs350-16t-e-2g Firmware | <=3.1 | |
Cisco Cbs350-16t-e-2g | ||
Cisco Cbs350-16p-2g Firmware | <=3.1 | |
Cisco Cbs350-16p-2g | ||
Cisco Cbs350-16p-e-2g Firmware | <=3.1 | |
Cisco Cbs350-16p-e-2g | ||
Cisco Cbs350-16fp-2g Firmware | <=3.1 | |
Cisco Cbs350-16fp-2g | ||
Cisco Cbs350-24t-4g Firmware | <=3.1 | |
Cisco Cbs350-24t-4g | ||
Cisco Cbs350-24p-4g Firmware | <=3.1 | |
Cisco Cbs350-24p-4g | ||
Cisco Cbs350-24fp-4g Firmware | <=3.1 | |
Cisco Cbs350-24fp-4g | ||
Cisco Cbs350-24s-4g Firmware | <=3.1 | |
Cisco Cbs350-24s-4g | ||
Cisco Cbs350-48t-4g Firmware | <=3.1 | |
Cisco Cbs350-48t-4g | ||
Cisco Cbs350-48p-4g Firmware | <=3.1 | |
Cisco Cbs350-48p-4g | ||
Cisco Cbs350-48fp-4g Firmware | <=3.1 | |
Cisco Cbs350-48fp-4g | ||
Cisco Cbs350-24t-4x Firmware | <=3.1 | |
Cisco Cbs350-24t-4x | ||
Cisco Cbs350-24p-4x Firmware | <=3.1 | |
Cisco Cbs350-24p-4x | ||
Cisco Cbs350-24fp-4x Firmware | <=3.1 | |
Cisco Cbs350-24fp-4x | ||
Cisco Cbs350-48t-4x Firmware | <=3.1 | |
Cisco Cbs350-48t-4x | ||
Cisco Cbs350-48p-4x Firmware | <=3.1 | |
Cisco Cbs350-48p-4x | ||
Cisco Cbs350-48fp-4x Firmware | <=3.1 | |
Cisco Cbs350-48fp-4x | ||
Cisco Cbs350-8mgp-2x Firmware | <=3.1 | |
Cisco Cbs350-8mgp-2x | ||
Cisco Cbs350-8mp-2x Firmware | <=3.1 | |
Cisco Cbs350-8mp-2x | ||
Cisco Cbs350-24mgp-4x Firmware | <=3.1 | |
Cisco Cbs350-24mgp-4x | ||
Cisco Cbs350-12np-4x Firmware | <=3.1 | |
Cisco Cbs350-12np-4x | ||
Cisco Cbs350-24ngp-4x Firmware | <=3.1 | |
Cisco Cbs350-24ngp-4x | ||
Cisco Cbs350-48ngp-4x Firmware | <=3.1 | |
Cisco Cbs350-48ngp-4x | ||
Cisco Cbs350-8xt Firmware | <=3.1 | |
Cisco Cbs350-8xt | ||
Cisco Cbs350-12xs Firmware | <=3.1 | |
Cisco Cbs350-12xs | ||
Cisco Cbs350-12xt Firmware | <=3.1 | |
Cisco Cbs350-12xt | ||
Cisco Cbs350-16xts Firmware | <=3.1 | |
Cisco Cbs350-16xts | ||
Cisco Cbs350-24xs Firmware | <=3.1 | |
Cisco Cbs350-24xs | ||
Cisco Cbs350-24xt Firmware | <=3.1 | |
Cisco Cbs350-24xt | ||
Cisco Cbs350-24xts Firmware | <=3.1 | |
Cisco Cbs350-24xts | ||
Cisco Cbs350-48xt-4x Firmware | <=3.1 | |
Cisco Cbs350-48xt-4x | ||
Cisco Esw2-350g-52 Firmware | <=2.5 | |
Cisco Esw2-350g-52 | ||
Cisco Esw2-350g-52dc Firmware | <=2.5 | |
Cisco Esw2-350g-52dc | ||
Cisco Esw2-550x-48 Firmware | <=2.5 | |
Cisco Esw2-550x-48 | ||
Cisco Esw2-550x-48dc Firmware | <=2.5 | |
Cisco Esw2-550x-48dc | ||
Cisco Sf200-24 Firmware | ||
Cisco Sf200-24 | ||
Cisco Sf200-24p Firmware | ||
Cisco Sf200-24p | ||
Cisco Sf200-24fp Firmware | ||
Cisco Sf200-24fp | ||
Cisco Sf200-48 Firmware | ||
Cisco Sf200-48 | ||
Cisco Sf200-48p Firmware | ||
Cisco Sf200-48p | ||
Cisco Sg200-08 Firmware | ||
Cisco Sg200-08 | ||
Cisco Sg200-08p Firmware | ||
Cisco Sg200-08p | ||
Cisco Sg200-10fp Firmware | ||
Cisco Sg200-10fp | ||
Cisco Sg200-18 Firmware | ||
Cisco Sg200-18 | ||
Cisco Sg200-26 Firmware | ||
Cisco Sg200-26 | ||
Cisco Sg200-26p Firmware | ||
Cisco Sg200-26p | ||
Cisco Sg200-26fp Firmware | ||
Cisco Sg200-26fp | ||
Cisco Sg200-50 Firmware | ||
Cisco Sg200-50 | ||
Cisco Sg200-50p Firmware | ||
Cisco Sg200-50p | ||
Cisco Sg200-50fp Firmware | ||
Cisco Sg200-50fp | ||
Cisco Sf300-08 Firmware | =1.4.11.02 | |
Cisco Sf300-08 | ||
Cisco Sf302-08 Firmware | =1.4.11.02 | |
Cisco Sf302-08 | ||
Cisco Sf302-08p Firmware | =1.4.11.02 | |
Cisco Sf302-08p | ||
Cisco Sf302-08pp Firmware | =1.4.11.02 | |
Cisco Sf302-08pp | ||
Cisco Sf302-08mp Firmware | =1.4.11.02 | |
Cisco Sf302-08mp | ||
Cisco Sf302-08mpp Firmware | =1.4.11.02 | |
Cisco Sf302-08mpp | ||
Cisco Sf300-24 Firmware | =1.4.11.02 | |
Cisco Sf300-24 | ||
Cisco Sf300-24p Firmware | =1.4.11.02 | |
Cisco Sf300-24p | ||
Cisco Sf300-24pp Firmware | =1.4.11.02 | |
Cisco Sf300-24pp | ||
Cisco Sf300-24mp Firmware | =1.4.11.02 | |
Cisco Sf300-24mp | ||
Cisco Sf300-48 Firmware | =1.4.11.02 | |
Cisco Sf300-48 | ||
Cisco Sf300-48p Firmware | =1.4.11.02 | |
Cisco Sf300-48p | ||
Cisco Sf300-48pp Firmware | =1.4.11.02 | |
Cisco Sf300-48pp | ||
Cisco Sg300-10 Firmware | =1.4.11.02 | |
Cisco Sg300-10 | ||
Cisco Sg300-10sfp Firmware | =1.4.11.02 | |
Cisco Sg300-10sfp | ||
Cisco Sg300-10p Firmware | =1.4.11.02 | |
Cisco Sg300-10p | ||
Cisco Sg300-10pp Firmware | =1.4.11.02 | |
Cisco Sg300-10pp | ||
Cisco Sg300-10mp Firmware | =1.4.11.02 | |
Cisco Sg300-10mp | ||
Cisco Sg300-10mpp Firmware | =1.4.11.02 | |
Cisco Sg300-10mpp | ||
Cisco Sg300-20 Firmware | =1.4.11.02 | |
Cisco Sg300-20 | ||
Cisco Sg300-28 Firmware | =1.4.11.02 | |
Cisco Sg300-28 | ||
Cisco Sg300-28p Firmware | =1.4.11.02 | |
Cisco Sg300-28p | ||
Cisco Sg300-28pp Firmware | =1.4.11.02 | |
Cisco Sg300-28pp | ||
Cisco Sg300-28mp Firmware | =1.4.11.02 | |
Cisco Sg300-28mp | ||
Cisco Sg300-52 Firmware | =1.4.11.02 | |
Cisco Sg300-52 | ||
Cisco Sg300-52p Firmware | =1.4.11.02 | |
Cisco Sg300-52p | ||
Cisco Sg300-52mp Firmware | =1.4.11.02 | |
Cisco Sg300-52mp | ||
Cisco Sg300-28sfp Firmware | =1.4.11.02 | |
Cisco Sg300-28sfp | ||
Cisco Sf500-24 Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sf500-24 | ||
Cisco Sf500-24p Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sf500-24p | ||
Cisco Sf500-24mp Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sf500-24mp | ||
Cisco Sf500-48 Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sf500-48 | ||
Cisco Sf500-48p Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sf500-48p | ||
Cisco Sf500-48mp Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sf500-48mp | ||
Cisco Sg500-28 Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sg500-28 | ||
Cisco Sg500-28p Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sg500-28p | ||
Cisco Sg500-28mpp Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sg500-28mpp | ||
Cisco Sg500-52 Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sg500-52 | ||
Cisco Sg500-52p Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sg500-52p | ||
Cisco Sg500-52mp Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sg500-52mp | ||
Cisco Sg500x-24 Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sg500x-24 | ||
Cisco Sg500x-24p Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sg500x-24p | ||
Cisco Sg500x-24mpp Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sg500x-24mpp | ||
Cisco Sg500x-48 Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sg500x-48 | ||
Cisco Sg500x-48p Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sg500x-48p | ||
Cisco Sg500x-48mp Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sg500x-48mp | ||
Cisco Sg500xg-8f8t Firmware | >=2.5.5.0<2.5.8.12 | |
Cisco Sg500xg-8f8t |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.