high
7.2
CWE
284
EPSS
0.063%
Advisory Published
Updated

CVE-2024-20263

First published: Fri Jan 26 2024(Updated: )

A vulnerability with the access control list (ACL) management within a stacked switch configuration of Cisco Business 250 Series Smart Switches and Business 350 Series Managed Switches could allow an unauthenticated, remote attacker to bypass protection offered by a configured ACL on an affected device. This vulnerability is due to incorrect processing of ACLs on a stacked configuration when either the primary or backup switches experience a full stack reload or power cycle. An attacker could exploit this vulnerability by sending crafted traffic through an affected device. A successful exploit could allow the attacker to bypass configured ACLs, causing traffic to be dropped or forwarded in an unexpected manner. The attacker does not have control over the conditions that result in the device being in the vulnerable state. Note: In the vulnerable state, the ACL would be correctly applied on the primary devices but could be incorrectly applied to the backup devices.

Credit: ykramarz@cisco.com

Affected SoftwareAffected VersionHow to fix
All of
Cisco Cbs250-8t-d Firmware>=3.4<3.4.0.17
Cisco Cbs250-8t-d
All of
Cisco Cbs250-8pp-d Firmware>=3.4<3.4.0.17
Cisco Cbs250-8pp-d
All of
Cisco Cbs250-8t-e-2g Firmware>=3.4<3.4.0.17
Cisco Cbs250-8t-e-2g
All of
Cisco Cbs250-8pp-e-2g Firmware>=3.4<3.4.0.17
Cisco Cbs250-8pp-e-2g
All of
Cisco Cbs250-8p-e-2g Firmware>=3.4<3.4.0.17
Cisco Cbs250-8p-e-2g
All of
Cisco Cbs250-8fp-e-2g Firmware>=3.4<3.4.0.17
Cisco Cbs250-8fp-e-2g
All of
Cisco Cbs250-16t-2g Firmware>=3.4<3.4.0.17
Cisco Cbs250-16t-2g
All of
Cisco Cbs250-16p-2g Firmware>=3.4<3.4.0.17
Cisco Cbs250-16p-2g
All of
Cisco Cbs250-24t-4g Firmware>=3.4<3.4.0.17
Cisco Cbs250-24t-4g
All of
Cisco Cbs250-24pp-4g Firmware>=3.4<3.4.0.17
Cisco Cbs250-24pp-4g
All of
Cisco Cbs250-24p-4g Firmware>=3.4<3.4.0.17
Cisco Cbs250-24p-4g
All of
Cisco Cbs250-24fp-4g Firmware>=3.4<3.4.0.17
Cisco Cbs250-24fp-4g
All of
Cisco Cbs250-48t-4g Firmware>=3.4<3.4.0.17
Cisco Cbs250-48t-4g
All of
Cisco Cbs250-48pp-4g Firmware>=3.4<3.4.0.17
Cisco Cbs250-48pp-4g
All of
Cisco Cbs250-48p-4g Firmware>=3.4<3.4.0.17
Cisco Cbs250-48p-4g
All of
Cisco Cbs250-24t-4x Firmware>=3.4<3.4.0.17
Cisco Cbs250-24t-4x
All of
Cisco Cbs250-24p-4x Firmware>=3.4<3.4.0.17
Cisco Cbs250-24p-4x
All of
Cisco Cbs250-24fp-4x Firmware>=3.4<3.4.0.17
Cisco Cbs250-24fp-4x
All of
Cisco Cbs250-48t-4x Firmware>=3.4<3.4.0.17
Cisco Cbs250-48t-4x
All of
Cisco Cbs250-48p-4x Firmware>=3.4<3.4.0.17
Cisco Cbs250-48p-4x
All of
Cisco Cbs350-8t-e-2g Firmware>=3.4<3.4.0.17
Cisco Cbs350-8t-e-2g
All of
Cisco Cbs350-8p-2g Firmware>=3.4<3.4.0.17
Cisco Cbs350-8p-2g
All of
Cisco Cbs350-8p-e-2g Firmware>=3.4<3.4.0.17
Cisco Cbs350-8p-e-2g
All of
Cisco Cbs350-8fp-2g Firmware>=3.4<3.4.0.17
Cisco Cbs350-8fp-2g
All of
Cisco Cbs350-8fp-e-2g Firmware>=3.4<3.4.0.17
Cisco Cbs350-8fp-e-2g
All of
Cisco Cbs350-8s-e-2g Firmware>=3.4<3.4.0.17
Cisco Cbs350-8s-e-2g
All of
Cisco Cbs350-16t-2g Firmware>=3.4<3.4.0.17
Cisco Cbs350-16t-2g
All of
Cisco Cbs350-16t-e-2g Firmware>=3.4<3.4.0.17
Cisco Cbs350-16t-e-2g
All of
Cisco Cbs350-16p-2g Firmware>=3.4<3.4.0.17
Cisco Cbs350-16p-2g
All of
Cisco Cbs350-16p-e-2g Firmware>=3.4<3.4.0.17
Cisco Cbs350-16p-e-2g
All of
Cisco Cbs350-16fp-2g Firmware>=3.4<3.4.0.17
Cisco Cbs350-16fp-2g
All of
Cisco Cbs350-24t-4g Firmware>=3.4<3.4.0.17
Cisco Cbs350-24t-4g
All of
Cisco Cbs350-24p-4g Firmware>=3.4<3.4.0.17
Cisco Cbs350-24p-4g
All of
Cisco Cbs350-24fp-4g Firmware>=3.4<3.4.0.17
Cisco Cbs350-24fp-4g
All of
Cisco Cbs350-24s-4g Firmware>=3.4<3.4.0.17
Cisco Cbs350-24s-4g
All of
Cisco Cbs350-48t-4g Firmware>=3.4<3.4.0.17
Cisco Cbs350-48t-4g
All of
Cisco Cbs350-48p-4g Firmware>=3.4<3.4.0.17
Cisco Cbs350-48p-4g
All of
Cisco Cbs350-48fp-4g Firmware>=3.4<3.4.0.17
Cisco Cbs350-48fp-4g
All of
Cisco Cbs350-24t-4x Firmware>=3.4<3.4.0.17
Cisco Cbs350-24t-4x
All of
Cisco Cbs350-24p-4x Firmware>=3.4<3.4.0.17
Cisco Cbs350-24p-4x
All of
Cisco Cbs350-24fp-4x Firmware>=3.4<3.4.0.17
Cisco Cbs350-24fp-4x
All of
Cisco Cbs350-48t-4x Firmware>=3.4<3.4.0.17
Cisco Cbs350-48t-4x
All of
Cisco Cbs350-48p-4x Firmware>=3.4<3.4.0.17
Cisco Cbs350-48p-4x
All of
Cisco Cbs350-48fp-4x Firmware>=3.4<3.4.0.17
Cisco Cbs350-48fp-4x
All of
Cisco Cbs350-8mgp-2x Firmware>=3.4<3.4.0.17
Cisco Cbs350-8mgp-2x
All of
Cisco Cbs350-8mp-2x Firmware>=3.4<3.4.0.17
Cisco Cbs350-8mp-2x
All of
Cisco Cbs350-24mgp-4x Firmware>=3.4<3.4.0.17
Cisco Cbs350-24mgp-4x
All of
Cisco Cbs350-12np-4x Firmware>=3.4<3.4.0.17
Cisco Cbs350-12np-4x
All of
Cisco Cbs350-24ngp-4x Firmware>=3.4<3.4.0.17
Cisco Cbs350-24ngp-4x
All of
Cisco Cbs350-48ngp-4x Firmware>=3.4<3.4.0.17
Cisco Cbs350-48ngp-4x
All of
Cisco Cbs350-8xt Firmware>=3.4<3.4.0.17
Cisco Cbs350-8xt
All of
Cisco Cbs350-12xs Firmware>=3.4<3.4.0.17
Cisco Cbs350-12xs
All of
Cisco Cbs350-12xt Firmware>=3.4<3.4.0.17
Cisco Cbs350-12xt
All of
Cisco Cbs350-16xts Firmware>=3.4<3.4.0.17
Cisco Cbs350-16xts
All of
Cisco Cbs350-24xs Firmware>=3.4<3.4.0.17
Cisco Cbs350-24xs
All of
Cisco Cbs350-24xt Firmware>=3.4<3.4.0.17
Cisco Cbs350-24xt
All of
Cisco Cbs350-24xts Firmware>=3.4<3.4.0.17
Cisco Cbs350-24xts
All of
Cisco Cbs350-48xt-4x Firmware>=3.4<3.4.0.17
Cisco Cbs350-48xt-4x
All of
Cisco Cbs250-8t-d Firmware>=2.5<2.5.9.54
Cisco Cbs250-8t-d
All of
Cisco Cbs250-8pp-d Firmware>=2.5<2.5.9.54
Cisco Cbs250-8pp-d
All of
Cisco Cbs250-8t-e-2g Firmware>=2.5<2.5.9.54
Cisco Cbs250-8t-e-2g
All of
Cisco Cbs250-8pp-e-2g Firmware>=2.5<2.5.9.54
Cisco Cbs250-8pp-e-2g
All of
Cisco Cbs250-8p-e-2g Firmware>=2.5<2.5.9.54
Cisco Cbs250-8p-e-2g
All of
Cisco Cbs250-8fp-e-2g Firmware>=2.5<2.5.9.54
Cisco Cbs250-8fp-e-2g
All of
Cisco Cbs250-16t-2g Firmware>=2.5<=2.5.9.54
Cisco Cbs250-16t-2g
All of
Cisco Cbs250-16p-2g Firmware>=2.5<2.5.9.54
Cisco Cbs250-16p-2g
All of
Cisco Cbs250-24t-4g Firmware>=2.5<2.5.9.54
Cisco Cbs250-24t-4g
All of
Cisco Cbs250-24pp-4g Firmware>=2.5<2.5.9.54
Cisco Cbs250-24pp-4g
All of
Cisco Cbs250-24p-4g Firmware>=2.5<2.5.9.54
Cisco Cbs250-24p-4g
All of
Cisco Cbs250-24fp-4g Firmware>=2.5<2.5.9.54
Cisco Cbs250-24fp-4g
All of
Cisco Cbs250-48t-4g Firmware>=2.5<2.5.9.54
Cisco Cbs250-48t-4g
All of
Cisco Cbs250-48pp-4g Firmware>=2.5<2.5.9.54
Cisco Cbs250-48pp-4g
All of
Cisco Cbs250-48p-4g Firmware>=2.5<2.5.9.54
Cisco Cbs250-48p-4g
All of
Cisco Cbs250-24t-4x Firmware>=2.5<2.5.9.54
Cisco Cbs250-24t-4x
All of
Cisco Cbs250-24p-4x Firmware>=2.5<2.5.9.54
Cisco Cbs250-24p-4x
All of
Cisco Cbs250-24fp-4x Firmware>=2.5<2.5.9.54
Cisco Cbs250-24fp-4x
All of
Cisco Cbs250-48t-4x Firmware>=2.5<2.5.9.54
Cisco Cbs250-48t-4x
All of
Cisco Cbs250-48p-4x Firmware>=2.5<2.5.9.54
Cisco Cbs250-48p-4x
All of
Cisco Cbs350-8t-e-2g Firmware>=2.5<2.5.9.54
Cisco Cbs350-8t-e-2g
All of
Cisco Cbs350-8p-2g Firmware>=2.5<2.5.9.54
Cisco Cbs350-8p-2g
All of
Cisco Cbs350-8p-e-2g Firmware>=2.5<2.5.9.54
Cisco Cbs350-8p-e-2g
All of
Cisco Cbs350-8fp-2g Firmware>=2.5<2.5.9.54
Cisco Cbs350-8fp-2g
All of
Cisco Cbs350-8fp-e-2g Firmware>=2.5<2.5.9.54
Cisco Cbs350-8fp-e-2g
All of
Cisco Cbs350-8s-e-2g Firmware>=2.5<2.5.9.54
Cisco Cbs350-8s-e-2g
All of
Cisco Cbs350-16t-2g Firmware>=2.5<2.5.9.54
Cisco Cbs350-16t-2g
All of
Cisco Cbs350-16t-e-2g Firmware>=2.5<2.5.9.54
Cisco Cbs350-16t-e-2g
All of
Cisco Cbs350-16p-2g Firmware>=2.5<2.5.9.54
Cisco Cbs350-16p-2g
All of
Cisco Cbs350-16p-e-2g Firmware>=2.5<2.5.9.54
Cisco Cbs350-16p-e-2g
All of
Cisco Cbs350-16fp-2g Firmware>=2.5<2.5.9.54
Cisco Cbs350-16fp-2g
All of
Cisco Cbs350-24t-4g Firmware>=2.5<2.5.9.54
Cisco Cbs350-24t-4g
All of
Cisco Cbs350-24p-4g Firmware>=2.5<2.5.9.54
Cisco Cbs350-24p-4g
All of
Cisco Cbs350-24fp-4g Firmware>=2.5<2.5.9.54
Cisco Cbs350-24fp-4g
All of
Cisco Cbs350-24s-4g Firmware>=2.5<2.5.9.54
Cisco Cbs350-24s-4g
All of
Cisco Cbs350-48t-4g Firmware>=2.5<2.5.9.54
Cisco Cbs350-48t-4g
All of
Cisco Cbs350-48p-4g Firmware>=2.5<2.5.9.54
Cisco Cbs350-48p-4g
All of
Cisco Cbs350-48fp-4g Firmware>=2.5<2.5.9.54
Cisco Cbs350-48fp-4g
All of
Cisco Cbs350-24t-4x Firmware>=2.5<2.5.9.54
Cisco Cbs350-24t-4x
All of
Cisco Cbs350-24p-4x Firmware>=2.5<2.5.9.54
Cisco Cbs350-24p-4x
All of
Cisco Cbs350-24fp-4x Firmware>=2.5<2.5.9.54
Cisco Cbs350-24fp-4x
All of
Cisco Cbs350-48t-4x Firmware>=2.5<2.5.9.54
Cisco Cbs350-48t-4x
All of
Cisco Cbs350-48p-4x Firmware>=2.5<2.5.9.54
Cisco Cbs350-48p-4x
All of
Cisco Cbs350-48fp-4x Firmware>=2.5<2.5.9.54
Cisco Cbs350-48fp-4x
All of
Cisco Cbs350-8mgp-2x Firmware>=2.5<2.5.9.54
Cisco Cbs350-8mgp-2x
All of
Cisco Cbs350-8mp-2x Firmware>=2.5<2.5.9.54
Cisco Cbs350-8mp-2x
All of
Cisco Cbs350-24mgp-4x Firmware>=2.5<2.5.9.54
Cisco Cbs350-24mgp-4x
All of
Cisco Cbs350-12np-4x Firmware>=2.5<2.5.9.54
Cisco Cbs350-12np-4x
All of
Cisco Cbs350-24ngp-4x Firmware>=2.5<2.5.9.54
Cisco Cbs350-24ngp-4x
All of
Cisco Cbs350-48ngp-4x Firmware>=2.5<2.5.9.54
Cisco Cbs350-48ngp-4x
All of
Cisco Cbs350-8xt Firmware>=2.5<2.5.9.54
Cisco Cbs350-8xt
All of
Cisco Cbs350-12xs Firmware>=2.5<2.5.9.54
Cisco Cbs350-12xs
All of
Cisco Cbs350-12xt Firmware>=2.5<2.5.9.54
Cisco Cbs350-12xt
All of
Cisco Cbs350-16xts Firmware>=2.5<2.5.9.54
Cisco Cbs350-16xts
All of
Cisco Cbs350-24xs Firmware>=2.5<2.5.9.54
Cisco Cbs350-24xs
All of
Cisco Cbs350-24xt Firmware>=2.5<2.5.9.54
Cisco Cbs350-24xt
All of
Cisco Cbs350-24xts Firmware>=2.5<2.5.9.54
Cisco Cbs350-24xts
All of
Cisco Cbs350-48xt-4x Firmware>=2.5<2.5.9.54
Cisco Cbs350-48xt-4x
All of
Cisco Sg350xg-2f10 Firmware>=2.5<2.5.9.54
Cisco Sg350xg-2f10
All of
Cisco Sg350xg-24f Firmware>=2.5<2.5.9.54
Cisco Sg350xg-24f
All of
Cisco Sg350xg-24t Firmware>=2.5<2.5.9.54
Cisco Sg350xg-24t
All of
Cisco Sg350xg-48t Firmware>=2.5<2.5.9.54
Cisco Sg350xg-48t
All of
Cisco Sg350x-24 Firmware>=2.5<2.5.9.54
Cisco Sg350x-24
All of
Cisco Sg350x-24p Firmware>=2.5<2.5.9.54
Cisco Sg350x-24p
All of
Cisco Sg350x-24mp Firmware>=2.5<2.5.9.54
Cisco Sg350x-24mp
All of
Cisco Sg350x-48 Firmware>=2.5<2.5.9.54
Cisco Sg350x-48
All of
Cisco Sg350x-48p Firmware>=2.5<2.5.9.54
Cisco Sg350x-48p
All of
Cisco Sg350x-48mp Firmware>=2.5<2.5.9.54
Cisco Sg350x-48mp
All of
Cisco Sg550xg-8f8t Firmware>=2.5<2.5.9.54
Cisco Sg550xg-8f8t
All of
Cisco Sg550xg-24f Firmware>=2.5<2.5.9.54
Cisco Sg550xg-24f
All of
Cisco Sg550xg-24t Firmware>=2.5<2.5.9.54
Cisco Sg550xg-24t
All of
Cisco Sg550x-48t Firmware>=2.5<2.5.9.54
Cisco Sg550x-48t
All of
Cisco Sg550x-24 Firmware>=2.5<2.5.9.54
Cisco Sg550x-24
All of
Cisco Sg550x-24p Firmware>=2.5<2.5.9.54
Cisco Sg550x-24p
All of
Cisco Sg550x-24mp Firmware>=2.5<2.5.9.54
Cisco Sg550x-24mp
All of
Cisco Sg550x-24mpp Firmware>=2.5<2.5.9.54
Cisco Sg550x-24mpp
All of
Cisco Sg550x-48 Firmware>=2.5<2.5.9.54
Cisco Sg550x-48
All of
Cisco Sg550x-48p Firmware>=2.5<2.5.9.54
Cisco Sg550x-48p
All of
Cisco Sg550x-48mp Firmware>=2.5<2.5.9.54
Cisco Sg550x-48mp
All of
Cisco Sf550x-24 Firmware>=2.5<2.5.9.54
Cisco Sf550x-24
All of
Cisco Sf550x-24p Firmware>=2.5<2.5.9.54
Cisco Sf550x-24p
All of
Cisco Sf550x-24mp Firmware>=2.5<2.5.9.54
Cisco Sf550x-24mp
All of
Cisco Sf550x-48 Firmware>=2.5<2.5.9.54
Cisco Sf550x-48
All of
Cisco Sf550x-48p Firmware>=2.5<2.5.9.54
Cisco Sf550x-48p
All of
Cisco Sf550x-48mp Firmware>=2.5<2.5.9.54
Cisco Sf550x-48mp

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203