MediumCVE-2019-12718

    Cisco Small Business Smart and Managed Switches Cross-Site Scripting Vulnerability (CVE-2019-12718)

    Published Sources: CVE.org

    Share

    What is affected, what to do

    A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based interface of the affected device.

    Update Cisco Sf250-24 Firmware to version 2.5.0.90, Cisco Sf250-24p Firmware to version 2.5.0.90, Cisco Sf250-48 Firmware to version 2.5.0.90.

    Affected
    • Cisco Sf250-24 Firmware lt *..2.5.0.90
    • Cisco Sf250-24p Firmware lt *..2.5.0.90
    • Cisco Sf250-48 Firmware lt *..2.5.0.90
    • Cisco Sf250-48hp Firmware lt *..2.5.0.90
    • Cisco Sf250-08 Firmware lt *..2.5.0.90
    • Cisco Sf250-08hp Firmware lt *..2.5.0.90
    • Cisco Sf250-10p Firmware lt *..2.5.0.90
    • Cisco Sf250-18 Firmware lt *..2.5.0.90
    • Cisco Sf250-26 Firmware lt *..2.5.0.90
    • Cisco Sf250-26hp Firmware lt *..2.5.0.90
    • Cisco Sf250-26p Firmware lt *..2.5.0.90
    • Cisco Sf250-50 Firmware lt *..2.5.0.90
    • Cisco Sf250-50hp Firmware lt *..2.5.0.90
    • Cisco Sf250-50p Firmware lt *..2.5.0.90
    • Cisco Sf250x-24 Firmware lt *..2.5.0.90
    • Cisco Sf250x-24p Firmware lt *..2.5.0.90
    • Cisco Sf250x-48 Firmware lt *..2.5.0.90
    • Cisco Sf250x-48p Firmware lt *..2.5.0.90
    • Cisco Sg350-10 Firmware lt *..2.5.0.90
    • Cisco Sg350-10p Firmware lt *..2.5.0.90
    • Cisco Sg350-10mp Firmware lt *..2.5.0.90
    • Cisco Sg355-10p Firmware lt *..2.5.0.90
    • Cisco Sg350-28 Firmware lt *..2.5.0.90
    • Cisco Sg350-28p Firmware lt *..2.5.0.90
    • Cisco Sg350-28mp Firmware lt *..2.5.0.90
    • Cisco Sf350-48 Firmware lt *..2.5.0.90
    • Cisco Sf350-48p Firmware lt *..2.5.0.90
    • Cisco Sf350-48mp Firmware lt *..2.5.0.90
    • Cisco Sx550x-16ft Firmware lt *..2.5.0.90
    • Cisco Sx550x-24ft Firmware lt *..2.5.0.90
    • Cisco Sx550x-12f Firmware lt *..2.5.0.90
    • Cisco Sx550x-24f Firmware lt *..2.5.0.90
    • Cisco Sx550x-24 Firmware lt *..2.5.0.90
    • Cisco Sx550x-52 Firmware lt *..2.5.0.90
    • Cisco Sg550x-24 Firmware lt *..2.5.0.90
    • Cisco Sg550x-24p Firmware lt *..2.5.0.90
    • Cisco Sg550x-24mp Firmware lt *..2.5.0.90
    • Cisco Sg550x-24mpp Firmware lt *..2.5.0.90
    • Cisco Sg550x-48 Firmware lt *..2.5.0.90
    • Cisco Sg550x-48p Firmware lt *..2.5.0.90
    • Cisco Sg550x-48mp Firmware lt *..2.5.0.90
    • Cisco Sf550x-24 Firmware lt *..2.5.0.90
    • Cisco Sf550x-24p Firmware lt *..2.5.0.90
    • Cisco Sf550x-24mp Firmware lt *..2.5.0.90
    • Cisco Sf550x-48 Firmware lt *..2.5.0.90
    • Cisco Sf550x-48p Firmware lt *..2.5.0.90
    • Cisco Sf550x-48mp Firmware lt *..2.5.0.90
    • Cisco SF200-24 Firmware lt *..1.4.11
    • Cisco Sf200-24fp Firmware lt *..1.4.11
    • Cisco SF200-24P Firmware lt *..1.4.11
    • Cisco SF200-48 Firmware lt *..1.4.11
    • Cisco Sf200-48p Firmware lt *..1.4.11
    • Cisco Sf200e-24 Firmware lt *..1.4.11
    • Cisco Sf200e-24p Firmware lt *..1.4.11
    • Cisco Sf200e-48 Firmware lt *..1.4.11
    • Cisco Sf200e48p Firmware lt *..1.4.11
    • Cisco Sg200-08 Firmware lt *..1.4.11
    • Cisco Sg200-08p Firmware lt *..1.4.11
    • Cisco Sg200-10fp Firmware lt *..1.4.11
    • Cisco Sg200-18 Firmware lt *..1.4.11
    • Cisco SG200-26 Firmware lt *..1.4.11
    • Cisco Sg200-26fp Firmware lt *..1.4.11
    • Cisco SG200-26P Firmware lt *..1.4.11
    • Cisco SG200-50 Firmware lt *..1.4.11
    • Cisco Sg200-50fp Firmware lt *..1.4.11
    • Cisco SG200-50P Firmware lt *..1.4.11
    • Cisco SF302-08PP Firmware lt *..1.4.11
    • Cisco SF302-08MPP Firmware lt *..1.4.11
    • Cisco SG300-10PP Firmware lt *..1.4.11
    • Cisco SG300-10MPP Firmware lt *..1.4.11
    • Cisco SF300-24PP Firmware lt *..1.4.11
    • Cisco SF300-48PP Firmware lt *..1.4.11
    • Cisco SG300-28PP Firmware lt *..1.4.11
    • Cisco SF300-08 Firmware lt *..1.4.11
    • Cisco SF300-48P Firmware lt *..1.4.11
    • Cisco SG300-10MP Firmware lt *..1.4.11
    • Cisco SG300-10P Firmware lt *..1.4.11
    • Cisco SG300-10 Firmware lt *..1.4.11
    • Cisco SG300-28P Firmware lt *..1.4.11
    • Cisco SF300-24P Firmware lt *..1.4.11
    • Cisco SF302-08MP Firmware lt *..1.4.11
    • Cisco SG300-28 Firmware lt *..1.4.11
    • Cisco SF300-48 Firmware lt *..1.4.11
    • Cisco SG300-20 Firmware lt *..1.4.11
    • Cisco SF302-08P Firmware lt *..1.4.11
    • Cisco SG300-52 Firmware lt *..1.4.11
    • Cisco SF300-24 Firmware lt *..1.4.11
    • Cisco SF302-08 Firmware lt *..1.4.11
    • Cisco SF300-24MP Firmware lt *..1.4.11
    • Cisco SG300-10SFP Firmware lt *..1.4.11
    • Cisco SG300-28MP Firmware lt *..1.4.11
    • Cisco SG300-52P Firmware lt *..1.4.11
    • Cisco SG300-52MP Firmware lt *..1.4.11
    • Cisco SG500-28MPP Firmware lt *..1.4.11
    • Cisco SG500-52MP Firmware lt *..1.4.11
    • Cisco Sg500xg-8f8t Firmware lt *..1.4.11
    • Cisco SF500-24 Firmware lt *..1.4.11
    • Cisco SF500-24P Firmware lt *..1.4.11
    • Cisco SF500-48 Firmware lt *..1.4.11
    • Cisco Sf500-48p Firmware lt *..1.4.11
    • Cisco SG500-28 Firmware lt *..1.4.11
    • Cisco SG500-28P Firmware lt *..1.4.11
    • Cisco SG500-52 Firmware lt *..1.4.11
    • Cisco SG500-52P Firmware lt *..1.4.11
    • Cisco SG500X-24 Firmware lt *..1.4.11
    • Cisco Sg500x-24p Firmware lt *..1.4.11
    • Cisco SG500X-48 Firmware lt *..1.4.11
    • Cisco SG500X-48P Firmware lt *..1.4.11
    Fixed in
    • Cisco Sf250-24 Firmware 2.5.0.90
    • Cisco Sf250-24p Firmware 2.5.0.90
    • Cisco Sf250-48 Firmware 2.5.0.90
    • Cisco Sf250-48hp Firmware 2.5.0.90
    • Cisco Sf250-08 Firmware 2.5.0.90
    • Cisco Sf250-08hp Firmware 2.5.0.90
    • Cisco Sf250-10p Firmware 2.5.0.90
    • Cisco Sf250-18 Firmware 2.5.0.90
    • Cisco Sf250-26 Firmware 2.5.0.90
    • Cisco Sf250-26hp Firmware 2.5.0.90
    • Cisco Sf250-26p Firmware 2.5.0.90
    • Cisco Sf250-50 Firmware 2.5.0.90
    • Cisco Sf250-50hp Firmware 2.5.0.90
    • Cisco Sf250-50p Firmware 2.5.0.90
    • Cisco Sf250x-24 Firmware 2.5.0.90
    • Cisco Sf250x-24p Firmware 2.5.0.90
    • Cisco Sf250x-48 Firmware 2.5.0.90
    • Cisco Sf250x-48p Firmware 2.5.0.90
    • Cisco Sg350-10 Firmware 2.5.0.90
    • Cisco Sg350-10p Firmware 2.5.0.90
    • Cisco Sg350-10mp Firmware 2.5.0.90
    • Cisco Sg355-10p Firmware 2.5.0.90
    • Cisco Sg350-28 Firmware 2.5.0.90
    • Cisco Sg350-28p Firmware 2.5.0.90
    • Cisco Sg350-28mp Firmware 2.5.0.90
    • Cisco Sf350-48 Firmware 2.5.0.90
    • Cisco Sf350-48p Firmware 2.5.0.90
    • Cisco Sf350-48mp Firmware 2.5.0.90
    • Cisco Sx550x-16ft Firmware 2.5.0.90
    • Cisco Sx550x-24ft Firmware 2.5.0.90
    • Cisco Sx550x-12f Firmware 2.5.0.90
    • Cisco Sx550x-24f Firmware 2.5.0.90
    • Cisco Sx550x-24 Firmware 2.5.0.90
    • Cisco Sx550x-52 Firmware 2.5.0.90
    • Cisco Sg550x-24 Firmware 2.5.0.90
    • Cisco Sg550x-24p Firmware 2.5.0.90
    • Cisco Sg550x-24mp Firmware 2.5.0.90
    • Cisco Sg550x-24mpp Firmware 2.5.0.90
    • Cisco Sg550x-48 Firmware 2.5.0.90
    • Cisco Sg550x-48p Firmware 2.5.0.90
    • Cisco Sg550x-48mp Firmware 2.5.0.90
    • Cisco Sf550x-24 Firmware 2.5.0.90
    • Cisco Sf550x-24p Firmware 2.5.0.90
    • Cisco Sf550x-24mp Firmware 2.5.0.90
    • Cisco Sf550x-48 Firmware 2.5.0.90
    • Cisco Sf550x-48p Firmware 2.5.0.90
    • Cisco Sf550x-48mp Firmware 2.5.0.90
    • Cisco SF200-24 Firmware 1.4.11
    • Cisco Sf200-24fp Firmware 1.4.11
    • Cisco SF200-24P Firmware 1.4.11
    • Cisco SF200-48 Firmware 1.4.11
    • Cisco Sf200-48p Firmware 1.4.11
    • Cisco Sf200e-24 Firmware 1.4.11
    • Cisco Sf200e-24p Firmware 1.4.11
    • Cisco Sf200e-48 Firmware 1.4.11
    • Cisco Sf200e48p Firmware 1.4.11
    • Cisco Sg200-08 Firmware 1.4.11
    • Cisco Sg200-08p Firmware 1.4.11
    • Cisco Sg200-10fp Firmware 1.4.11
    • Cisco Sg200-18 Firmware 1.4.11
    • Cisco SG200-26 Firmware 1.4.11
    • Cisco Sg200-26fp Firmware 1.4.11
    • Cisco SG200-26P Firmware 1.4.11
    • Cisco SG200-50 Firmware 1.4.11
    • Cisco Sg200-50fp Firmware 1.4.11
    • Cisco SG200-50P Firmware 1.4.11
    • Cisco SF302-08PP Firmware 1.4.11
    • Cisco SF302-08MPP Firmware 1.4.11
    • Cisco SG300-10PP Firmware 1.4.11
    • Cisco SG300-10MPP Firmware 1.4.11
    • Cisco SF300-24PP Firmware 1.4.11
    • Cisco SF300-48PP Firmware 1.4.11
    • Cisco SG300-28PP Firmware 1.4.11
    • Cisco SF300-08 Firmware 1.4.11
    • Cisco SF300-48P Firmware 1.4.11
    • Cisco SG300-10MP Firmware 1.4.11
    • Cisco SG300-10P Firmware 1.4.11
    • Cisco SG300-10 Firmware 1.4.11
    • Cisco SG300-28P Firmware 1.4.11
    • Cisco SF300-24P Firmware 1.4.11
    • Cisco SF302-08MP Firmware 1.4.11
    • Cisco SG300-28 Firmware 1.4.11
    • Cisco SF300-48 Firmware 1.4.11
    • Cisco SG300-20 Firmware 1.4.11
    • Cisco SF302-08P Firmware 1.4.11
    • Cisco SG300-52 Firmware 1.4.11
    • Cisco SF300-24 Firmware 1.4.11
    • Cisco SF302-08 Firmware 1.4.11
    • Cisco SF300-24MP Firmware 1.4.11
    • Cisco SG300-10SFP Firmware 1.4.11
    • Cisco SG300-28MP Firmware 1.4.11
    • Cisco SG300-52P Firmware 1.4.11
    • Cisco SG300-52MP Firmware 1.4.11
    • Cisco SG500-28MPP Firmware 1.4.11
    • Cisco SG500-52MP Firmware 1.4.11
    • Cisco Sg500xg-8f8t Firmware 1.4.11
    • Cisco SF500-24 Firmware 1.4.11
    • Cisco SF500-24P Firmware 1.4.11
    • Cisco SF500-48 Firmware 1.4.11
    • Cisco Sf500-48p Firmware 1.4.11
    • Cisco SG500-28 Firmware 1.4.11
    • Cisco SG500-28P Firmware 1.4.11
    • Cisco SG500-52 Firmware 1.4.11
    • Cisco SG500-52P Firmware 1.4.11
    • Cisco SG500X-24 Firmware 1.4.11
    • Cisco Sg500x-24p Firmware 1.4.11
    • Cisco SG500X-48 Firmware 1.4.11
    • Cisco SG500X-48P Firmware 1.4.11

    Not sure whether and how you are affected? Ask a question about this vulnerability

    Metrics

    6.1

    Priority

    XIEM Effective CVSS: highest available CVSS rating from NVD and vendor data.

    Source: NVD, CVSS v3

    6.1

    CVSS v3

    Severity Medium on the scale from 0 to 10.

    Source: CVE.org

    0.8 %

    EPSS score

    Low — model estimates < 1% exploitation likelihood.

    Source: FIRST EPSS, percentile 56.9

    Show all metrics
    Severity
    Medium
    Priority (0–325)

    The priority score is a consolidated metric that condenses several individual signals into a single, action-guiding ranking: technical severity (CVSS), exploitation likelihood (EPSS), known-exploited status (KEV) and the context of the affected asset. The aim is to answer the only truly important question in vulnerability management: what first?

    Read in glossary
    56.37 Methodology
    Exploit maturity

    An exploit is code or a technique that specifically uses a concrete vulnerability to force unintended behaviour — such as executing code or escalating privileges. It is the tool that turns a theoretical flaw into a practical attack.

    Read in glossary
    no public PoC known
    XIEM Effective CVSS

    XIEM® is the tiered managed-security operating model from NEOSEC and a registered trademark of NEOSEC GmbH. It extends classic SIEM — the central collection, normalisation and correlation of security-relevant events — with endpoint forensics, network visibility and deception technology, and consolidates them into three building tiers: Sentry, Orchestrate and Command.

    Read in glossary
    6.1 Methodology
    CVSS v3

    CVSS is the globally established, open standard for assessing the technical severity of a vulnerability on a scale from 0 to 10. It describes how easily a flaw can be exploited and what damage it can cause — but not how likely its actual exploitation is. CVSS and the complementary EPSS deliberately answer different questions.

    Read in glossary
    6.1
    EPSS score

    The EPSS score is the absolute model output for an individual vulnerability: the estimated probability of real-world exploitation within the next 30 days, expressed as a value between 0 and 1 (i.e. 0 % to 100 %). A score of 0.42 means „the model estimates a 42 % chance of real-world exploitation within 30 days“.

    Read in glossary
    0.8 %
    Low — model estimates < 1% exploitation likelihood.
    EPSS percentile

    The EPSS percentile is the relative position of a vulnerability within all EPSS-scored CVEs, expressed as a value between 0 and 1. A percentile of 0.90 means „this CVE has a higher EPSS score than 90 % of all other scored CVEs“. Unlike the EPSS score, it is not a probability — but a positioning within a ranking.

    Read in glossary
    56.9
    High — this CVE ranks above the median of all CVEs scored today (rank ≥ 36%).
    KEV status

    The KEV catalogue is a list maintained by the US authority CISA of vulnerabilities for which active exploitation in the wild has been confirmed. It answers not the question „how severe?“ but „is it already being attacked?“ — thereby sharply prioritising patching.

    Read in glossary
    —
    Published
    CISA assessment (SSVC)
    Exploitation: none known · not automatable · Technical impact: partial
    Source: CISA Vulnrichment, as of 21 November 2024
    CWE

    CWE is a catalogue of typical weakness types in software and hardware — such as flawed input validation, unsafe memory handling or poor authentication. Where a CVE names a concrete vulnerability in a concrete product, a CWE describes the underlying class of defect.

    Read in glossary
    CWE-79

    Detection rules

    No NEOSEC detection rule is available for this vulnerability yet.

    Classification under NIS2 and CRA

    Rule-based classification from exploitation status and severity. It does not replace a case-by-case assessment.

    NIS2

    NIS2 is EU Directive (EU) 2022/2555 to raise the level of cybersecurity across the Union. It substantially broadens obligations compared with the first NIS directive: more sectors, mandatory risk management, staged reporting duties and personal accountability of senior management.

    Read in glossary
    Handle the vulnerability in regular vulnerability handling under Art. 21(2)(e) NIS2.
    CRA

    The CRA is EU Regulation (EU) 2024/2847 setting horizontal cybersecurity requirements for „products with digital elements“ — from industrial controllers and software to connected consumer devices. For the first time manufacturers must ensure security across the entire product lifecycle, handle vulnerabilities and provide security updates.

    Read in glossary
    From 11.12.2027, Annex I Part II CRA requires manufacturers of affected products with digital elements to handle vulnerabilities without delay and provide security updates.
    ISO/IEC 27001

    ISO/IEC 27001 is the internationally leading standard for an information security management system (ISMS). It describes a risk-based, process-oriented framework to systematically plan, implement, review and improve information security.

    Read in glossary
    Control A.8.8, management of technical vulnerabilities: assess relevance to your systems, plan remediation and keep evidence.

    Description

    A vulnerability in the web-based interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link and subsequently access a specific web interface page. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information.

    Source: NVD (NIST), cvelistv5

    Vendors and products

    Affected operating systems

    Affected operating systems
    Otherciscosf200-24_firmware—
    Otherciscosf200-24fp_firmware—
    Otherciscosf200-24p_firmware—
    Otherciscosf200-48_firmware—
    Otherciscosf200-48p_firmware—
    Otherciscosf200e-24_firmware—
    Otherciscosf200e-24p_firmware—
    Otherciscosf200e-48_firmware—
    Otherciscosf200e48p_firmware—
    Otherciscosf250-08_firmware—
    Otherciscosf250-08hp_firmware—
    Otherciscosf250-10p_firmware—
    Otherciscosf250-18_firmware—
    Otherciscosf250-24_firmware—
    Otherciscosf250-24p_firmware—
    Otherciscosf250-26_firmware—
    Otherciscosf250-26hp_firmware—
    Otherciscosf250-26p_firmware—
    Otherciscosf250-48_firmware—
    Otherciscosf250-48hp_firmware—
    Otherciscosf250-50_firmware—
    Otherciscosf250-50hp_firmware—
    Otherciscosf250-50p_firmware—
    Otherciscosf250x-24_firmware—

    Weakness classes (CWE)

    • CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

      Base

      The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

      Entry at MITRE CWE-79

    References & sources

    • tools.cisco.com20191016 Cisco Small Business Smart and Managed Switches Cross-Site Scripting VulnerabilityVendor advisory, x_refsource_CISCO, Vendor advisory
    Embed badge

    Show the severity and KEV status of this vulnerability on your site – with a link back here. The image is updated hourly.

    Badge preview for CVE-2019-12718
    <a href="https://intel.neosec.eu/en/cve/CVE-2019-12718"><img src="https://intel.neosec.eu/badge/cve/CVE-2019-12718.svg?lang=en" alt="CVE-2019-12718 – NEOSEC Intel" height="20"></a>