CVE-2016-1473 Cisco Small Business 220 devices with firmware before 1.0.1.1 have a hardcoded SNMP community, which allows remote attackers to read or modify SNMP objects by leveraging knowledge of this community, a...
CriticalCVSS 9.8
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco Small Business 220 devices with firmware before 1.0.1.1 have a hardcoded SNMP community, which allows remote attackers to read or modify SNMP objects by leveraging knowledge of this community, aka Bug ID CSCuz76216.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco small business 220 series smart plus switches | = 1.0.0.17 | No fix listed |
| cisco small business 220 series smart plus switches | = 1.0.0.18 | No fix listed |
| cisco small business 220 series smart plus switches | = 1.0.0.19 | No fix listed |
References
- 20160831 Cisco Small Business 220 Series Smart Plus Switches SNMP Unauthorized Access Vulnerability vendor-advisory
- 92710 vdb-entry
- 1036711 vdb-entry
- www.synacktiv.com third-party-advisory