Cisco Small Business Series Switches Buffer Overflow Vulnerabilities

Multiple vulnerabilities in the web-based user interface of certain Cisco Small Business Series Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition or execute arbitrary code with root privileges on an affected device. These vulnerabilities are due to improper validation of requests that are sent to the web interface. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)

Cisco Small Business 安全漏洞

Cisco Small Business是美国思科（Cisco）公司的一个交换机。 Cisco Small Business Series Switches 存在安全漏洞，该漏洞源于基于 Web 的用户界面中存在多个漏洞。未经身份验证的远程攻击者利用该漏洞可以造成拒绝服务 (DoS) 或在受影响的设备上以 root 权限执行任意代码。

N/A

其他