NetSight
IP …
high8.8

CVE-2016-1470

Cross-site request forgery (CSRF) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows r…

Impact

Cross-site request forgery (CSRF) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230.

Affected products

VendorProductAffected versions
CiscoSmall Business 220 Series Smart Plus Switches
Versions 1.0.0.17, 1.0.0.18, 1.0.0.19

Weakness classification

CWE-352

References