{"containers": {"cna": {"affected": [{"product": "Cisco Small Business 300 and 500 Series Managed Switches", "vendor": "n/a", "versions": [{"status": "affected", "version": "Cisco Small Business 300 and 500 Series Managed Switches"}]}], "datePublic": "2018-01-18T00:00:00", "descriptions": [{"lang": "en", "value": "A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. This vulnerability affects the following Cisco Small Business 300 and 500 Series Managed Switches: Cisco 350 Series Managed Switches, Cisco 350X Series Stackable Managed Switches, Cisco 550X Series Stackable Managed Switches, Cisco ESW2 Series Advanced Switches, Cisco Small Business 300 Series Managed Switches, Cisco Small Business 500 Series Stackable Managed Switches. Cisco Bug IDs: CSCvg29980."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-113", "description": "CWE-113", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2018-01-18T05:57:01", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-300-500-smb2"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@cisco.com", "ID": "CVE-2017-12308", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Cisco Small Business 300 and 500 Series Managed Switches", "version": {"version_data": [{"version_value": "Cisco Small Business 300 and 500 Series Managed Switches"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. This vulnerability affects the following Cisco Small Business 300 and 500 Series Managed Switches: Cisco 350 Series Managed Switches, Cisco 350X Series Stackable Managed Switches, Cisco 550X Series Stackable Managed Switches, Cisco ESW2 Series Advanced Switches, Cisco Small Business 300 Series Managed Switches, Cisco Small Business 500 Series Stackable Managed Switches. Cisco Bug IDs: CSCvg29980."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-113"}]}]}, "references": {"reference_data": [{"name": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-300-500-smb2", "refsource": "CONFIRM", "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-300-500-smb2"}]}}}}, "cveMetadata": {"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2017-12308", "datePublished": "2018-01-18T06:00:00", "dateReserved": "2017-08-03T00:00:00", "dateUpdated": "2018-01-18T05:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg350-10_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E62A8CD6-FD0B-4F93-A521-A574470806AA", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg350-10:-:*:*:*:*:*:*:*", "matchCriteriaId": "79843C24-2CE8-4040-9C04-79902D8F741D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg350-10p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2E28746B-DDAF-48C3-98D2-6DF02F10402B", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg350-10p:-:*:*:*:*:*:*:*", "matchCriteriaId": "FD650E51-E248-4CFD-8163-72717B66D675", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg350-10mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7DB647C6-4F49-44B3-B5DC-1CB4B2808809", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg350-10mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "9B36A173-5C14-4B38-B3DD-CD83B19AF94B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg355-10p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D42E184D-0BB9-4632-A910-7223EF5846DC", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg355-10p:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4432E33-8F3C-4C51-8AE3-C53333A867E1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg350-28_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4D9AE8D4-8324-47DE-8A1B-002F04791CF4", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg350-28:-:*:*:*:*:*:*:*", "matchCriteriaId": "500F9351-FA0C-4648-A2A6-ACFF6C8FD157", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg350-28p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4D3EAE27-6D3D-427E-B94B-E65FF60A477F", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg350-28p:-:*:*:*:*:*:*:*", "matchCriteriaId": "8122322F-6104-4978-9E00-40437365FF67", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg350-28mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1FA8309E-218A-4EBB-86CB-53568F87AE03", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg350-28mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "11548FB9-ADB1-4281-B89B-6D61836072DE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf350-48_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "18D13620-A801-4837-A2D9-D8BB5EC67C8E", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf350-48:-:*:*:*:*:*:*:*", "matchCriteriaId": "5EF58ED1-AECE-435C-8F8F-6053C44E01C9", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf350-48p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FC203EBF-AADC-4536-A3A8-8FAD7EF49F66", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf350-48p:-:*:*:*:*:*:*:*", "matchCriteriaId": "B2BE66F3-51C8-42D8-927A-5BA0B9B072EF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf350-48mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3250E1B1-3478-4089-8D4D-210CF5382396", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf350-48mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "B2DE3B15-DD70-445E-936C-0C9D5C3F1450", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg350xg-2f10_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1C40A90E-B0CC-4713-858A-CE98FA73A59A", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg350xg-2f10:-:*:*:*:*:*:*:*", "matchCriteriaId": "3C65522C-E250-408C-8A89-AFE4909804D4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg350xg-24f_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CA0176C1-1AC1-4A05-B2C7-E1E4C76A61FD", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg350xg-24f:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9620FE5-567B-4B78-910D-14819E2CDE3B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg350xg-24t_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "59267A4D-846E-4E07-9158-7AB7AE6A8754", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg350xg-24t:-:*:*:*:*:*:*:*", "matchCriteriaId": "2EEA8A38-C545-49AA-812F-8668EED9B23D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg350xg-48t_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FCFACA27-EBA0-44A2-ADDB-16701EE476A5", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg350xg-48t:-:*:*:*:*:*:*:*", "matchCriteriaId": "4F986FD6-A139-43CA-9D83-40CAA8D62B32", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg350x-24_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8CB0A209-D8D2-48E9-9A83-A4EFFD5EBDC0", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg350x-24:-:*:*:*:*:*:*:*", "matchCriteriaId": "FB21D371-D443-40FE-8DFF-3DD4A9655471", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg350x-24p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "BE38A4A5-81FC-4A79-8E8F-F6B288ED2283", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg350x-24p:-:*:*:*:*:*:*:*", "matchCriteriaId": "06FC4FC7-5DF4-4FE5-87A5-3B897FAFD72E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg350x-24mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B981B6EB-AAEE-4B4E-86B1-005E11D1DB30", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg350x-24mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "B9879BE9-D4FA-4EEA-8852-B972299220E3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg350x-48_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3D496D2D-84AF-47A4-BC5E-607C7E5E6DF6", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg350x-48:-:*:*:*:*:*:*:*", "matchCriteriaId": "613300D2-A079-415A-B9F7-178B8048AA61", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg350x-48p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "19A38D74-522F-4001-97C8-8F3D33AC9DC8", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg350x-48p:-:*:*:*:*:*:*:*", "matchCriteriaId": "8CA11905-1953-4EEB-95CE-3BDB619D0F72", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg350x-48mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "03436FAE-7FBF-4C4A-9EE4-3FD94316ED25", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg350x-48mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "76D1DE6B-6E09-40CF-9507-867ECB183A30", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sx550x-16ft_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6961B4DB-F152-43A6-9440-6655BCAD379F", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sx550x-16ft:-:*:*:*:*:*:*:*", "matchCriteriaId": "02D9BEB5-78FE-49EB-92BE-6597E7608E71", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sx550x-24ft_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "2E912AC1-B82E-406B-8480-720223F2FD74", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sx550x-24ft:-:*:*:*:*:*:*:*", "matchCriteriaId": "BFEDE246-7DF9-486D-A5B9-5596FE0AC582", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sx550x-12f_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "438E02A3-D177-4476-80DA-0C95C783B161", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sx550x-12f:-:*:*:*:*:*:*:*", "matchCriteriaId": "D52D0E9C-FC04-4A45-81D5-A335B30F725E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sx550x-24f_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CA6AE9A9-61D3-4CE4-B1D3-029734397956", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sx550x-24f:-:*:*:*:*:*:*:*", "matchCriteriaId": "4CAD50CE-8D02-4FD9-965A-7C14D146B52D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sx550x-24_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "142DCA4A-57D6-48C0-ADD9-749E9B8464D1", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sx550x-24:-:*:*:*:*:*:*:*", "matchCriteriaId": "B39E214D-A4B7-460C-9402-8F94336B30A0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sx550x-52_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D7CEC74C-D5FE-45CA-83A1-15F771958993", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sx550x-52:-:*:*:*:*:*:*:*", "matchCriteriaId": "297A662D-BD11-4021-8F19-946CA4BCF8D2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg550x-24_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "46470295-0C82-4D37-A9CE-722CAEED6008", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg550x-24:-:*:*:*:*:*:*:*", "matchCriteriaId": "7ADB1D69-CBDC-4045-A806-087878560EF4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg550x-24p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9162932E-4570-4A6C-8634-1D756EF42C7F", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg550x-24p:-:*:*:*:*:*:*:*", "matchCriteriaId": "81B88075-F579-492C-B87C-5E4291D269B2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg550x-24mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FAB16572-975A-473E-8EDA-757BE49CDFCF", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg550x-24mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "605B8DE5-56EB-4FFF-BC04-1B3A38762727", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg550x-24mpp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "662D1FD6-5DBB-4DC3-A11E-00AA87A3DF19", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg550x-24mpp:-:*:*:*:*:*:*:*", "matchCriteriaId": "C940275E-41A8-470D-AD97-AB6EC5A75CEF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg550x-48_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F584E122-98B8-4F6F-92F1-4A6C83C3B934", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg550x-48:-:*:*:*:*:*:*:*", "matchCriteriaId": "235AAB5A-9D0A-4864-89E2-D69D1D8A79D1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg550x-48p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F6B8D73B-BEF3-4006-9ED4-5C8F98B479D9", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg550x-48p:-:*:*:*:*:*:*:*", "matchCriteriaId": "967DCE55-B7D5-4D63-9693-B42FAA9243B1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg550x-48mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F96925BF-73FC-454B-9B00-632EB2A1E1E5", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg550x-48mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "9AA6BED3-2564-4A7C-91DC-F843E301A35E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf550x-24_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "752F1EF7-FA82-4B8E-B8B6-5939270DB705", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf550x-24:-:*:*:*:*:*:*:*", "matchCriteriaId": "F53C2EAA-CD47-4D76-BBC6-C59D531AB1D4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf550x-24p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FB932882-F8F9-44ED-A673-9A07211D5D7F", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf550x-24p:-:*:*:*:*:*:*:*", "matchCriteriaId": "4BDF26D7-B3B5-47CA-94E9-B14BEFE02318", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf550x-24mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "857756BD-B680-43EE-9FDB-F5FD56D7A1AC", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf550x-24mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "A3AC0655-0F02-4397-881F-CFB6DAC3AA3B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf550x-48_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "28F46707-41BD-4118-933D-1FF48045880E", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf550x-48:-:*:*:*:*:*:*:*", "matchCriteriaId": "C374EB87-A4C6-43FB-B42E-DEA973375EC2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf550x-48p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "37DB9ADA-FCCF-407A-A18D-530FF0815551", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf550x-48p:-:*:*:*:*:*:*:*", "matchCriteriaId": "903E59DA-DE59-4CD4-BE32-B91DDA1DA07D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf550x-48mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A4B89E91-97B0-47EE-BC1E-D0A0098C8C92", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf550x-48mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "0A6AFC45-9ECC-4D4A-80BF-20F49C83A57A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:esw2-350g-52_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "50CB4BA4-E815-4506-A6FE-21B1F41EEEDF", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:esw2-350g-52:-:*:*:*:*:*:*:*", "matchCriteriaId": "6812853E-C083-4841-A467-91130ED194BE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:esw2-350g-52dc_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "666E6BEC-32C1-4361-AF78-3B5739D38378", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:esw2-350g-52dc:-:*:*:*:*:*:*:*", "matchCriteriaId": "26A7AB18-C75F-4C63-9132-140EFC46E3C5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:esw2-550x-48_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5803FD62-086B-4316-BDFC-331156C208FD", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:esw2-550x-48:-:*:*:*:*:*:*:*", "matchCriteriaId": "A9B70093-E9FE-410A-973E-CE847F08F43A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:esw2-550x-48dc_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4015A3F7-5706-40E9-84AD-A81D9205B2CE", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:esw2-550x-48dc:-:*:*:*:*:*:*:*", "matchCriteriaId": "A3503F68-CF84-468E-9A40-9F98875DD1C1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf302-08pp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "98827546-CA39-4D4E-9C0F-D3B020BE08D2", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf302-08pp:-:*:*:*:*:*:*:*", "matchCriteriaId": "EFFEF3C3-0C7C-4359-A45F-00152ACAB545", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf302-08mpp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D4B42742-D701-4AE9-A833-189FB6708FC9", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf302-08mpp:-:*:*:*:*:*:*:*", "matchCriteriaId": "19890DBE-F1B9-4454-8738-AC2AC6704C75", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg300-10pp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D3E798EF-99B0-4D76-B0F2-6FB9499FCF8B", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg300-10pp:-:*:*:*:*:*:*:*", "matchCriteriaId": "8F1772C3-48DB-4BEF-9F12-CDCC3BBFA0E1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg300-10mpp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3A289E57-D99E-4A61-BEE3-91A43F156030", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg300-10mpp:-:*:*:*:*:*:*:*", "matchCriteriaId": "AAD7CDE3-7247-4EA9-8A72-7ABC961BD895", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf300-24pp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A415AFE8-B965-45B7-B01F-E3F8F79F8EDD", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf300-24pp:-:*:*:*:*:*:*:*", "matchCriteriaId": "4E7B70CB-9D7A-4637-8A51-634157F7AC85", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf300-48pp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AD23FB5D-9A7F-4A03-A269-A6FE486677D5", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf300-48pp:-:*:*:*:*:*:*:*", "matchCriteriaId": "E5248F85-411D-4ED9-983C-A28A90C8FC70", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg300-28pp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "61764001-8BCD-4D43-9324-9ADED2F2890C", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg300-28pp:-:*:*:*:*:*:*:*", "matchCriteriaId": "AD6F6741-AA56-47EA-998C-78FD7F6B01CC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf300-08_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A61B9373-76C9-4EFC-B4AF-EB8833310750", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf300-08:-:*:*:*:*:*:*:*", "matchCriteriaId": "7C96B794-16D3-46FE-8A2B-262BD38994E8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf300-48p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "58E2227C-F7C1-424A-B5C5-5C4BDF052521", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf300-48p:-:*:*:*:*:*:*:*", "matchCriteriaId": "A5307DEF-DCD1-417A-B649-FF4DCE66193E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg300-10mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3E2BDD45-5A8B-494A-A9BE-597ABD9B16D7", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg300-10mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "95F6D7AC-2ACB-4693-AB8E-C700B99C5BF4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg300-10p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B8982BA5-8ABD-4235-8D24-90F4C949C583", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg300-10p:-:*:*:*:*:*:*:*", "matchCriteriaId": "9054C3D1-BA1A-4BAC-8834-88673B804E4E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg300-10_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FDB31016-63A8-4436-A4A5-605E79071A71", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg300-10:-:*:*:*:*:*:*:*", "matchCriteriaId": "78B44981-5C59-4328-A7DB-FBF50F9C92C2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg300-28p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1BC8B43A-27FD-4188-9247-11796701FF22", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg300-28p:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2D5109D-C78B-4362-B000-0AA073FCC843", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf300-24p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6F611F78-9D39-4970-B43B-D634203D6F2A", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf300-24p:-:*:*:*:*:*:*:*", "matchCriteriaId": "71D909B9-5B11-401E-8484-D6CD39D64142", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf302-08mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "49E144D2-93D7-4F19-8C96-50CB5BA0FBCE", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf302-08mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "8124725E-8340-43BC-BEBB-BC39E3AE7368", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg300-28_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F0D8F03D-511A-42FC-8A89-0C69A4BC0D13", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg300-28:-:*:*:*:*:*:*:*", "matchCriteriaId": "E74DB8D8-B79B-4DAE-BF88-98C1F518E76D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf300-48_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DA114A88-569D-4B50-A908-2CD30EF15D74", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf300-48:-:*:*:*:*:*:*:*", "matchCriteriaId": "765DECDB-4234-4444-B78F-01C1DCBAD8FA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg300-20_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "DC685D61-7F81-4877-A5A4-E1AE0D2298BC", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg300-20:-:*:*:*:*:*:*:*", "matchCriteriaId": "50A677CE-4360-4780-ABF9-466C45CB19E1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf302-08p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CE87339F-65FC-4BFA-9C5F-6E1E7CA08E2F", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf302-08p:-:*:*:*:*:*:*:*", "matchCriteriaId": "B9C97D56-2E3C-4F36-89E2-BC169AED3CC2", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg300-52_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B2D46DE3-626E-407D-A5CA-B05E32F1B6C8", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg300-52:-:*:*:*:*:*:*:*", "matchCriteriaId": "8E26EE1D-763F-4893-9997-F4C1CE7A1089", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf300-24_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F600F290-8723-42BE-9E6A-587132ECE8F4", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf300-24:-:*:*:*:*:*:*:*", "matchCriteriaId": "C324F7E3-2088-452F-B049-519A9D25C9B5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf302-08_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F1E85841-5E82-4D66-B7E7-C8AE8A11E1BB", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf302-08:-:*:*:*:*:*:*:*", "matchCriteriaId": "04042998-72B6-4215-9264-CC563E51D9CF", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf300-24mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1BCAC9EF-CCF9-4BD2-AADD-A3F48B95B52C", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf300-24mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "4882366A-9450-47BE-BE70-CC3A9D2F5275", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg300-10sfp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F214C861-ECCF-4734-9866-E237F5CC5D53", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg300-10sfp:-:*:*:*:*:*:*:*", "matchCriteriaId": "B402FBC0-91FC-471D-9D8A-C71F4FECF338", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg300-28mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "6791A301-2164-4F44-8B03-91B96BE2CDD0", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg300-28mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "2DB2B761-E591-42B6-B62F-63A6D41F4FAC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg300-52p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "03FF785B-6274-4092-9E43-3396F4FE8CAD", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg300-52p:-:*:*:*:*:*:*:*", "matchCriteriaId": "5E9DF9C4-9D06-4449-8AF0-8322C6B77F6A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg300-52mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0C38DF13-3C4A-4CB5-9205-74670FC0C8E5", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg300-52mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "A4C3B5A2-CAE6-4E75-A1A3-4FCB1C62A7A8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg500-28mpp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "76E523C7-CF2B-430B-829E-D803AA1CDE62", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg500-28mpp:-:*:*:*:*:*:*:*", "matchCriteriaId": "BA6035EA-0F55-4C76-9E2F-DD4938576D1A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg500-52mp_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "ADCEE83B-369D-4F38-AE97-9ABD11A20DAA", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg500-52mp:-:*:*:*:*:*:*:*", "matchCriteriaId": "36E534B2-12EA-489B-A939-4F1965B5EC66", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg500xg-8f8t_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "54B4BEBC-BC5E-4003-9B34-E2A6896F509D", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg500xg-8f8t:-:*:*:*:*:*:*:*", "matchCriteriaId": "E8FE0E3E-5AB4-4BBA-A787-072799BF3EAB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf500-24_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0CF964C5-4CA9-4D81-B60E-2BEDEF47E571", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf500-24:-:*:*:*:*:*:*:*", "matchCriteriaId": "6C0F8958-8059-411B-86C8-40B1073C80C6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf500-24p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "30B99E44-30D9-4AF1-97D5-EA2DCAF6E825", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf500-24p:-:*:*:*:*:*:*:*", "matchCriteriaId": "218D6018-551C-46B8-AE27-F88E6052F37B", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf500-48_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "41879534-43D0-476A-931C-2E8B187D456E", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf500-48:-:*:*:*:*:*:*:*", "matchCriteriaId": "EAB8DE78-E398-458B-98EF-EEEB6E219BAB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sf500-48p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "975C54C6-B3B0-4C89-9C35-05BBEF6E75C7", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sf500-48p:-:*:*:*:*:*:*:*", "matchCriteriaId": "E443C685-F000-4F89-ADEA-7084138018D1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg500-28_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A1DC345D-BEB3-409A-803C-D7FE72EFB073", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg500-28:-:*:*:*:*:*:*:*", "matchCriteriaId": "0779C5EE-C145-4C28-8F60-EE692409102D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg500-28p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "23C93EF7-4851-4E4E-A600-BAD62254D707", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg500-28p:-:*:*:*:*:*:*:*", "matchCriteriaId": "DF4D4AD6-C5FD-40D8-B002-2B784EC88B89", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg500-52_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D89D488C-0582-4338-8848-EEA8DB6AC2DC", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg500-52:-:*:*:*:*:*:*:*", "matchCriteriaId": "40273E59-7C60-4094-B9FC-A633A2F23E61", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg500-52p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "00F8E3E4-55D4-43A7-8564-167A2A32DED1", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg500-52p:-:*:*:*:*:*:*:*", "matchCriteriaId": "14A201E5-0603-4C96-8F4B-87934B7B99D7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg500x-24_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1BA5FC05-98F4-4A8C-91E0-703784F5970C", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg500x-24:-:*:*:*:*:*:*:*", "matchCriteriaId": "D1A9D4D4-EF09-4862-B62A-94913AEFA2BE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg500x-24p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A55371BC-B4A3-4E56-AE2E-63BD3D5835D2", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg500x-24p:-:*:*:*:*:*:*:*", "matchCriteriaId": "0093FE2A-3D4C-4435-AE35-D213C9700771", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg500x-48_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A7C44E0B-336B-466C-85E0-F92626456CED", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg500x-48:-:*:*:*:*:*:*:*", "matchCriteriaId": "B84D71EE-64CC-4966-98D1-C0697816120A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:sg500x-48p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7E12126E-E0E3-479D-B5FA-578683C70050", "versionEndExcluding": "1.4.9.4", "versionStartIncluding": "1.4.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:sg500x-48p:-:*:*:*:*:*:*:*", "matchCriteriaId": "5E99C3C2-0B98-4108-8102-80132BF47A32", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web framework of Cisco Small Business Managed Switches software could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack against a user of the web interface of an affected system. The vulnerability is due to insufficient input validation of some parameters that are passed to the web server of the affected system. An attacker could exploit this vulnerability by convincing a user to follow a malicious link or by intercepting a user request and injecting malicious code into the request. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected web interface or allow the attacker to access sensitive browser-based information. This vulnerability affects the following Cisco Small Business 300 and 500 Series Managed Switches: Cisco 350 Series Managed Switches, Cisco 350X Series Stackable Managed Switches, Cisco 550X Series Stackable Managed Switches, Cisco ESW2 Series Advanced Switches, Cisco Small Business 300 Series Managed Switches, Cisco Small Business 500 Series Stackable Managed Switches. Cisco Bug IDs: CSCvg29980."}, {"lang": "es", "value": "Una vulnerabilidad en el framework web de Cisco Small Business Managed Switches Software podr\u00eda permitir que un atacante remoto sin autenticar lleve a cabo un ataque de separaci\u00f3n de respuesta HTTP contra un usuario de dicha interfaz en el sistema afectado. La vulnerabilidad se debe a una validaci\u00f3n de entrada insuficiente de algunos par\u00e1metros que se pasan al servidor web del sistema afectado. Un atacante podr\u00eda explotar esta vulnerabilidad convenciendo a un usuario de que acceda a un enlace malicioso o interceptando una petici\u00f3n de usuario e inyectando c\u00f3digo malicioso en la petici\u00f3n. Un exploit con \u00e9xito podr\u00eda permitir que el atacante ejecute c\u00f3digo script arbitrario en el contexto de la interfaz web afectada o que acceda a informaci\u00f3n sensible del navegador. Esta vulnerabilidad afecta a los siguientes productos de Cisco Small Business 300 and 500 Series Managed Switches: Cisco 350 Series Managed Switches, Cisco 350X Series Stackable Managed Switches, Cisco 550X Series Stackable Managed Switches, Cisco ESW2 Series Advanced Switches, Cisco Small Business 300 Series Managed Switches y Cisco Small Business 500 Series Stackable Managed Switches. Cisco Bug IDs: CSCvg29980."}], "id": "CVE-2017-12308", "lastModified": "2020-09-04T17:08:37.317", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.8, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-01-18T06:29:00.267", "references": [{"source": "ykramarz@cisco.com", "tags": ["Vendor Advisory"], "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180117-300-500-smb2"}], "sourceIdentifier": "ykramarz@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-113"}], "source": "ykramarz@cisco.com", "type": "Secondary"}]}

{}