Metrics
No CVSS v4.0
Attack Vector Network
Attack Complexity Low
Privileges Required None
Scope Changed
Confidentiality Impact Low
Integrity Impact Low
Availability Impact None
User Interaction Required
No CVSS v3.0
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact None
This CVE is not in the KEV list.
The EPSS score is 0.00242.
Exploitation none
Automatable no
Technical Impact partial
Affected Vendors & Products
| Vendors | Products |
|---|---|
|
Cisco
Subscribe
|
Esw2-350g-52
Subscribe
Esw2-350g-52 Firmware
Subscribe
Esw2-350g-52dc
Subscribe
Esw2-350g-52dc Firmware
Subscribe
Esw2-550x-48
Subscribe
Esw2-550x-48 Firmware
Subscribe
Esw2-550x-48dc
Subscribe
Esw2-550x-48dc Firmware
Subscribe
Sf300-08
Subscribe
Sf300-08 Firmware
Subscribe
Sf300-24
Subscribe
Sf300-24 Firmware
Subscribe
Sf300-24mp
Subscribe
Sf300-24mp Firmware
Subscribe
Sf300-24p
Subscribe
Sf300-24p Firmware
Subscribe
Sf300-24pp
Subscribe
Sf300-24pp Firmware
Subscribe
Sf300-48
Subscribe
Sf300-48 Firmware
Subscribe
Sf300-48p
Subscribe
Sf300-48p Firmware
Subscribe
Sf300-48pp
Subscribe
Sf300-48pp Firmware
Subscribe
Sf302-08
Subscribe
Sf302-08 Firmware
Subscribe
Sf302-08mp
Subscribe
Sf302-08mp Firmware
Subscribe
Sf302-08mpp
Subscribe
Sf302-08mpp Firmware
Subscribe
Sf302-08p
Subscribe
Sf302-08p Firmware
Subscribe
Sf302-08pp
Subscribe
Sf302-08pp Firmware
Subscribe
Sf350-48
Subscribe
Sf350-48 Firmware
Subscribe
Sf350-48mp
Subscribe
Sf350-48mp Firmware
Subscribe
Sf350-48p
Subscribe
Sf350-48p Firmware
Subscribe
Sf500-24
Subscribe
Sf500-24 Firmware
Subscribe
Sf500-24p
Subscribe
Sf500-24p Firmware
Subscribe
Sf500-48
Subscribe
Sf500-48 Firmware
Subscribe
Sf500-48p
Subscribe
Sf500-48p Firmware
Subscribe
Sf550x-24
Subscribe
Sf550x-24 Firmware
Subscribe
Sf550x-24mp
Subscribe
Sf550x-24mp Firmware
Subscribe
Sf550x-24p
Subscribe
Sf550x-24p Firmware
Subscribe
Sf550x-48
Subscribe
Sf550x-48 Firmware
Subscribe
Sf550x-48mp
Subscribe
Sf550x-48mp Firmware
Subscribe
Sf550x-48p
Subscribe
Sf550x-48p Firmware
Subscribe
Sg300-10
Subscribe
Sg300-10 Firmware
Subscribe
Sg300-10mp
Subscribe
Sg300-10mp Firmware
Subscribe
Sg300-10mpp
Subscribe
Sg300-10mpp Firmware
Subscribe
Sg300-10p
Subscribe
Sg300-10p Firmware
Subscribe
Sg300-10pp
Subscribe
Sg300-10pp Firmware
Subscribe
Sg300-10sfp
Subscribe
Sg300-10sfp Firmware
Subscribe
Sg300-20
Subscribe
Sg300-20 Firmware
Subscribe
Sg300-28
Subscribe
Sg300-28 Firmware
Subscribe
Sg300-28mp
Subscribe
Sg300-28mp Firmware
Subscribe
Sg300-28p
Subscribe
Sg300-28p Firmware
Subscribe
Sg300-28pp
Subscribe
Sg300-28pp Firmware
Subscribe
Sg300-52
Subscribe
Sg300-52 Firmware
Subscribe
Sg300-52mp
Subscribe
Sg300-52mp Firmware
Subscribe
Sg300-52p
Subscribe
Sg300-52p Firmware
Subscribe
Sg350-10
Subscribe
Sg350-10 Firmware
Subscribe
Sg350-10mp
Subscribe
Sg350-10mp Firmware
Subscribe
Sg350-10p
Subscribe
Sg350-10p Firmware
Subscribe
Sg350-28
Subscribe
Sg350-28 Firmware
Subscribe
Sg350-28mp
Subscribe
Sg350-28mp Firmware
Subscribe
Sg350-28p
Subscribe
Sg350-28p Firmware
Subscribe
Sg350x-24
Subscribe
Sg350x-24 Firmware
Subscribe
Sg350x-24mp
Subscribe
Sg350x-24mp Firmware
Subscribe
Sg350x-24p
Subscribe
Sg350x-24p Firmware
Subscribe
Sg350x-48
Subscribe
Sg350x-48 Firmware
Subscribe
Sg350x-48mp
Subscribe
Sg350x-48mp Firmware
Subscribe
Sg350x-48p
Subscribe
Sg350x-48p Firmware
Subscribe
Sg350xg-24f
Subscribe
Sg350xg-24f Firmware
Subscribe
Sg350xg-24t
Subscribe
Sg350xg-24t Firmware
Subscribe
Sg350xg-2f10
Subscribe
Sg350xg-2f10 Firmware
Subscribe
Sg350xg-48t
Subscribe
Sg350xg-48t Firmware
Subscribe
Sg355-10p
Subscribe
Sg355-10p Firmware
Subscribe
Sg500-28
Subscribe
Sg500-28 Firmware
Subscribe
Sg500-28mpp
Subscribe
Sg500-28mpp Firmware
Subscribe
Sg500-28p
Subscribe
Sg500-28p Firmware
Subscribe
Sg500-52
Subscribe
Sg500-52 Firmware
Subscribe
Sg500-52mp
Subscribe
Sg500-52mp Firmware
Subscribe
Sg500-52p
Subscribe
Sg500-52p Firmware
Subscribe
Sg500x-24
Subscribe
Sg500x-24 Firmware
Subscribe
Sg500x-24p
Subscribe
Sg500x-24p Firmware
Subscribe
Sg500x-48
Subscribe
Sg500x-48 Firmware
Subscribe
Sg500x-48p
Subscribe
Sg500x-48p Firmware
Subscribe
Sg500xg-8f8t
Subscribe
Sg500xg-8f8t Firmware
Subscribe
Sg550x-24
Subscribe
Sg550x-24 Firmware
Subscribe
Sg550x-24mp
Subscribe
Sg550x-24mp Firmware
Subscribe
Sg550x-24mpp
Subscribe
Sg550x-24mpp Firmware
Subscribe
Sg550x-24p
Subscribe
Sg550x-24p Firmware
Subscribe
Sg550x-48
Subscribe
Sg550x-48 Firmware
Subscribe
Sg550x-48mp
Subscribe
Sg550x-48mp Firmware
Subscribe
Sg550x-48p
Subscribe
Sg550x-48p Firmware
Subscribe
Sx550x-12f
Subscribe
Sx550x-12f Firmware
Subscribe
Sx550x-16ft
Subscribe
Sx550x-16ft Firmware
Subscribe
Sx550x-24
Subscribe
Sx550x-24 Firmware
Subscribe
Sx550x-24f
Subscribe
Sx550x-24f Firmware
Subscribe
Sx550x-24ft
Subscribe
Sx550x-24ft Firmware
Subscribe
Sx550x-52
Subscribe
Sx550x-52 Firmware
Subscribe
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
Configuration 3 [-]
| AND |
|
Configuration 4 [-]
| AND |
|
Configuration 5 [-]
| AND |
|
Configuration 6 [-]
| AND |
|
Configuration 7 [-]
| AND |
|
Configuration 8 [-]
| AND |
|
Configuration 9 [-]
| AND |
|
Configuration 10 [-]
| AND |
|
Configuration 11 [-]
| AND |
|
Configuration 12 [-]
| AND |
|
Configuration 13 [-]
| AND |
|
Configuration 14 [-]
| AND |
|
Configuration 15 [-]
| AND |
|
Configuration 16 [-]
| AND |
|
Configuration 17 [-]
| AND |
|
Configuration 18 [-]
| AND |
|
Configuration 19 [-]
| AND |
|
Configuration 20 [-]
| AND |
|
Configuration 21 [-]
| AND |
|
Configuration 22 [-]
| AND |
|
Configuration 23 [-]
| AND |
|
Configuration 24 [-]
| AND |
|
Configuration 25 [-]
| AND |
|
Configuration 26 [-]
| AND |
|
Configuration 27 [-]
| AND |
|
Configuration 28 [-]
| AND |
|
Configuration 29 [-]
| AND |
|
Configuration 30 [-]
| AND |
|
Configuration 31 [-]
| AND |
|
Configuration 32 [-]
| AND |
|
Configuration 33 [-]
| AND |
|
Configuration 34 [-]
| AND |
|
Configuration 35 [-]
| AND |
|
Configuration 36 [-]
| AND |
|
Configuration 37 [-]
| AND |
|
Configuration 38 [-]
| AND |
|
Configuration 39 [-]
| AND |
|
Configuration 40 [-]
| AND |
|
Configuration 41 [-]
| AND |
|
Configuration 42 [-]
| AND |
|
Configuration 43 [-]
| AND |
|
Configuration 44 [-]
| AND |
|
Configuration 45 [-]
| AND |
|
Configuration 46 [-]
| AND |
|
Configuration 47 [-]
| AND |
|
Configuration 48 [-]
| AND |
|
Configuration 49 [-]
| AND |
|
Configuration 50 [-]
| AND |
|
Configuration 51 [-]
| AND |
|
Configuration 52 [-]
| AND |
|
Configuration 53 [-]
| AND |
|
Configuration 54 [-]
| AND |
|
Configuration 55 [-]
| AND |
|
Configuration 56 [-]
| AND |
|
Configuration 57 [-]
| AND |
|
Configuration 58 [-]
| AND |
|
Configuration 59 [-]
| AND |
|
Configuration 60 [-]
| AND |
|
Configuration 61 [-]
| AND |
|
Configuration 62 [-]
| AND |
|
Configuration 63 [-]
| AND |
|
Configuration 64 [-]
| AND |
|
Configuration 65 [-]
| AND |
|
Configuration 66 [-]
| AND |
|
Configuration 67 [-]
| AND |
|
Configuration 68 [-]
| AND |
|
Configuration 69 [-]
| AND |
|
Configuration 70 [-]
| AND |
|
Configuration 71 [-]
| AND |
|
Configuration 72 [-]
| AND |
|
Configuration 73 [-]
| AND |
|
Configuration 74 [-]
| AND |
|
Configuration 75 [-]
| AND |
|
Configuration 76 [-]
| AND |
|
Configuration 77 [-]
| AND |
|
Configuration 78 [-]
| AND |
|
Configuration 79 [-]
| AND |
|
Configuration 80 [-]
| AND |
|
Configuration 81 [-]
| AND |
|
Configuration 82 [-]
| AND |
|
Configuration 83 [-]
| AND |
|
Configuration 84 [-]
| AND |
|
Configuration 85 [-]
| AND |
|
No data.
No data.
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2017-3881 | A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. This vulnerability affects the following Cisco Small Business 300 and 500 Series Managed Switches: Cisco 350 Series Managed Switches, Cisco 350X Series Stackable Managed Switches, Cisco 550X Series Stackable Managed Switches, Cisco ESW2 Series Advanced Switches, Cisco Small Business 300 Series Managed Switches, Cisco Small Business 500 Series Stackable Managed Switches. Cisco Bug IDs: CSCvg29980. |
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
Mon, 02 Dec 2024 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: cisco
Published:
Updated: 2024-12-02T21:46:39.725Z
Reserved: 2017-08-03T00:00:00
Link: CVE-2017-12308
Updated: 2024-08-05T18:36:55.894Z
Status : Modified
Published: 2018-01-18T06:29:00.267
Modified: 2024-11-21T03:09:16.797
Link: CVE-2017-12308
No data.
OpenCVE Enrichment
No data.
EUVD