Unscored CVE-2016-1470 EUVD-2016-2569GHSA-r2mm-9jcv-7jg7

Cross-site request forgery (CSRF) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware bef…

Published Sep 2, 2016 · Updated Aug 5, 2024 · Assigned by cisco

Description

Cross-site request forgery (CSRF) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230.

References

20160831 Cisco Small Business 220 Series Smart Plus Switches Web Interface Cross-Site Request Forgery Vulnerability vendor-advisory
1036722 vdb-entry
92709 vdb-entry
http://www.synacktiv.com/ressources/advisories_cisco_switch_sg220_csrf.pdf