high7.2
CVE-2021-1571
Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: H…
Impact
Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting (XSS) attack Conduct an HTML injection attack For more information about these vulnerabilities, see the Details section of this advisory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Sf220-24 Firmware | before 1.2.0.6 |
| Cisco | Sf220-24p Firmware | before 1.2.0.6 |
| Cisco | Sf220-48 Firmware | before 1.2.0.6 |
| Cisco | Sf220-48p Firmware | before 1.2.0.6 |
| Cisco | Sg220-26 Firmware | before 1.2.0.6 |
| Cisco | Sg220-26p Firmware | before 1.2.0.6 |
| Cisco | Sg220-28mp Firmware | before 1.2.0.6 |
| Cisco | Sg220-50 Firmware | before 1.2.0.6 |
| Cisco | Sg220-50p Firmware | before 1.2.0.6 |