CVE:CVE-2020-3121
CNNVD:CNNVD-202001-1124
Cisco 350 Series Managed Switches和550X Series Stackable Managed Switches都是美国思科（Cisco）公司的产品。Cisco 350 Series Managed Switches是一款350系列管理型交换机。550X Series Stackable Managed Switches是一款550X系列管理型交换机。
使用2.5.0.90及之前版本固件的Cisco S250 Series Smart Switches、350 Series Managed Switches和550X Series Stackable Managed Switches中存在跨站脚本漏洞。该漏洞源于程序没有对用户输入进行充分验证。远程攻击者可借助特制的链接利用漏洞执行任意代码。
solution:Upgrade cisco sg250x-24_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250x-24p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250x-48_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250x-48p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250-08_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250-08hp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250-10p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250-18_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250-26_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250-26hp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250-26p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250-50_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250-50hp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250-50p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250-24_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250-24p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250-48_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg250-48hp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sf350-48_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sf350-48p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sf350-48mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg350-10_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg350-10p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg350-10mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg355-10mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg350-28_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg350-28p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg350-28mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sx550x-16ft_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sx550x-24ft_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sx550x-12ft_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sx550x-24_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sx550x-52_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg550x-24_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg550x-24p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg550x-24mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg550x-24mpp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg550x-48_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg550x-48p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sg550x-48mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sf550x-24_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sf550x-24p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sf550x-48_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sf550x-48p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]; Upgrade cisco sf550x-48mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90]