CVE:CVE-2019-12718
CNNVD:CNNVD-201910-1090
多款Cisco产品中基于Web的管理界面存在跨站脚本漏洞，该漏洞源于程序没有充分验证用户提交的输入。远程攻击者可利用该漏洞在该受影响界面的上下文中执行任意脚本代码或访问基于浏览器的敏感信息。以下产品及版本受到影响：Cisco 250 Series；Smart Switches；350 Series Managed Switches；550X Series Stackable Managed Switches；Small Business 200 Series Smart Switches；Small Business 300；Series Managed Switches；Small Business 500 Series Stackable Managed Switches。
solution:Upgrade cisco sf250-24_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-24p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-48_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-48hp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-08_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-08hp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-10p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-18_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-26_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-26hp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-26p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-50_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-50hp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-50p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250x-24_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250x-24p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250x-48_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250x-48p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg350-10_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg350-10p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg350-10mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg355-10p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg350-28_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg350-28p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg350-28mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf350-48_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf350-48p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf350-48mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sx550x-16ft_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sx550x-24ft_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sx550x-12f_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sx550x-24f_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sx550x-24_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sx550x-52_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg550x-24_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg550x-24p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg550x-24mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg550x-24mpp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg550x-48_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg550x-48p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg550x-48mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf550x-24_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf550x-24p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf550x-24mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf550x-48_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf550x-48p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf550x-48mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf200-24_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf200-24fp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf200-24p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf200-48_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf200-48p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf200e-24_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf200e-24p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf200e-48_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf200e48p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg200-08_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg200-08p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg200-10fp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg200-18_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg200-26_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg200-26fp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg200-26p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg200-50_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg200-50fp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg200-50p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf302-08pp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf302-08mpp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg300-10pp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg300-10mpp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf300-24pp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf300-48pp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg300-28pp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf300-08_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf300-48p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg300-10mp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg300-10p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg300-10_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg300-28p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf300-24p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf302-08mp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg300-28_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf300-48_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg300-20_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf302-08p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg300-52_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf300-24_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf302-08_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf300-24mp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg300-10sfp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg300-28mp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg300-52p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg300-52mp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg500-28mpp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg500-52mp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg500xg-8f8t_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf500-24_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf500-24p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf500-48_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf500-48p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg500-28_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg500-28p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg500-52_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg500-52p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg500x-24_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg500x-24p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg500x-48_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sg500x-48p_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11)