1. Home
  2. CVE Database
  3. CVE-2019-15993
MEDIUM · 5.3

CVE-2019-15993

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lac...

Vulnerability Description

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web UI of an affected device. A successful exploit could allow the attacker to access sensitive device information, which includes configuration files.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
CiscoSg250X-24 Firmware< 2.5.0.92
CiscoSg250X-24-
CiscoSg250X-24P Firmware< 2.5.0.92
CiscoSg250X-24P-
CiscoSg250X-48 Firmware< 2.5.0.92
CiscoSg250X-48-
CiscoSg250X-48P Firmware< 2.5.0.92
CiscoSg250X-48P-
CiscoSg250-08 Firmware< 2.5.0.92
CiscoSg250-08-
CiscoSg250-08Hp Firmware< 2.5.0.92
CiscoSg250-08Hp-
CiscoSg250-10P Firmware< 2.5.0.92
CiscoSg250-10P-
CiscoSg250-18 Firmware< 2.5.0.92
CiscoSg250-18-
CiscoSg250-26 Firmware< 2.5.0.92
CiscoSg250-26-
CiscoSg250-26Hp Firmware< 2.5.0.92
CiscoSg250-26Hp-

Related Weaknesses (CWE)

CWE-287CWE-16

References

FAQ

What is CVE-2019-15993?

CVE-2019-15993 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lac...

How severe is CVE-2019-15993?

CVE-2019-15993 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-15993?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Sg250X-24 Firmware, Cisco Sg250X-24, Cisco Sg250X-24P Firmware, Cisco Sg250X-24P, Cisco Sg250X-48 Firmware.