CVE:CVE-2017-12307
CNNVD:CNNVD-201801-634
Cisco Small Business 300 Series Managed Switches等都是美国思科（Cisco）公司的交换机设备。Cisco Small Business Managed Switches software是运行在其中的一套交换机管理软件。
多款Cisco产品中的Cisco Small Business Managed Switches software存在跨站脚本漏洞，该漏洞程序没有对传递到Web服务器上的参数执行充分的输入验证。远程攻击者可通过诱使用户点击恶意的链接或拦截用户请求并注入恶意的代码利用该漏洞在受影响Web界面的上下文中执行任意代码或访问基于浏览器的敏感信息。以下产品受到影响：Cisco Small Business 300 Series Managed Switches；Cisco Small Business 500 Series Stackable Managed Switches；Cisco 350 Series Managed Switches；Cisco 350X Series Stackable Managed Switches；Cisco 550X Series Stackable Managed Switches；Cisco ESW2 Series Advanced Switches。
solution:Upgrade cisco sg350-10_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg350-10p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg350-10mp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg355-10p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg350-28_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg350-28p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg350-28mp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf350-48_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf350-48p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf350-48mp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg350xg-2f10_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg350xg-24f_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg350xg-24t_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg350xg-48t_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg350x-24_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg350x-24p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg350x-24mp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg350x-48_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg350x-48p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg350x-48mp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sx550x-16ft_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sx550x-24ft_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sx550x-12f_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sx550x-24f_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sx550x-24_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sx550x-52_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg550x-24_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg550x-24p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg550x-24mp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg550x-24mpp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg550x-48_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg550x-48p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg550x-48mp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf550x-24_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf550x-24p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf550x-24mp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf550x-48_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf550x-48p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf550x-48mp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco esw2-350g-52_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco esw2-350g-52dc_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco esw2-550x-48_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco esw2-550x-48dc_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf302-08pp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf302-08mpp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg300-10pp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg300-10mpp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf300-24pp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf300-48pp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg300-28pp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf300-08_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf300-48p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg300-10mp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg300-10p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg300-10_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg300-28p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf300-24p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf302-08mp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg300-28_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf300-48_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg300-20_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf302-08p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg300-52_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf300-24_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf302-08_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf300-24mp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg300-10sfp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg300-28mp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg300-52p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg300-52mp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg500-28mpp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg500-52mp_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg500xg-8f8t_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf500-24_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf500-24p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf500-48_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sf500-48p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg500-28_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg500-28p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg500-52_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg500-52p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg500x-24_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg500x-24p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg500x-48_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4); Upgrade cisco sg500x-48p_firmware to a higher version than 1.4.9.4,and avoid the version [1.4.7.0,1.4.9.4)