CVE:CVE-2020-3297
CNNVD:CNNVD-202007-103
Cisco Small Business 200 Series Smart Switches等都是美国思科（Cisco）公司的产品。Cisco Small Business 200 Series Smart Switches是一款小型智能交换机设备。Cisco 350 Series Managed Switches是一款350系列管理型交换机。550X Series Stackable Managed Switches是一款550X系列管理型交换机。
多款Cisco产品中Web接口的会话管理存在授权问题漏洞。攻击者可利用该漏洞绕过身份验证保护，获取被劫持会话账户的权限，包括管理员权限。以下产品及版本受到影响：Cisco 250 Series Smart Switches；350 Series Managed Switches；350X Series Stackable Managed Switches；550X Series Stackable Managed Switches；Small Business 200 Series Smart Switches；Small Business 300 Series Managed Switches；Small Business 500 Series Stackable Managed Switches。
solution:Upgrade cisco sg250x-24_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg250x-24p_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg250x-48_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg250x-48p_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg250-08_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg250-08hp_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg250-10p_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg250-18_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg250-26_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg250-26hp_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg250-26p_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg250-50_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg250-50hp_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg250-50p_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sf250-24_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sf250-24p_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sf250-48_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sf250-48hp_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg350-10_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg350-10p_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg350-10mp_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg355-10p_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg350-28_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg350-28p_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg350-28mp_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sf350-48_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sf350-48p_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sf350-48mp_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg350xg-2f10_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg350xg-24f_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg350xg-24t_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg350xg-48t_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg350x-24_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg350x-24p_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg350x-24mp_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg350x-48_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg350x-48p_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg350x-48mp_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sx550x-16ft_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sx550x-24ft_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sx550x-12f_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sx550x-24f_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sx550x-24_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sx550x-52_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg550x-24_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg550x-24p_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg550x-24mp_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg550x-24mpp_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg550x-48_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg550x-48p_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sg550x-48mp_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sf550x-24_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sf550x-24p_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sf550x-24mp_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sf550x-48_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sf550x-48p_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sf550x-48mp_firmware to a higher version than 2.5.5.47,and avoid the version (,2.5.5.47); Upgrade cisco sf200-24_firmware to a higher version than -; Upgrade cisco sf200-24fp_firmware to a higher version than -; Upgrade cisco sf200-24p_firmware to a higher version than -; Upgrade cisco sf200-48_firmware to a higher version than -; Upgrade cisco sf200-48p_firmware to a higher version than -; Upgrade cisco sf200e-24_firmware to a higher version than -; Upgrade cisco sf200e-24p_firmware to a higher version than -; Upgrade cisco sf200e-48_firmware to a higher version than -; Upgrade cisco sf200e-48p_firmware to a higher version than -; Upgrade cisco sg200-08_firmware to a higher version than -; Upgrade cisco sg200-08p_firmware to a higher version than -; Upgrade cisco sg200-10fp_firmware to a higher version than -; Upgrade cisco sg200-18_firmware to a higher version than -; Upgrade cisco sg200-26_firmware to a higher version than -; Upgrade cisco sg200-26fp_firmware to a higher version than -; Upgrade cisco sg200-26p_firmware to a higher version than -; Upgrade cisco sg200-50_firmware to a higher version than -; Upgrade cisco sg200-50fp_firmware to a higher version than -; Upgrade cisco sg200-50p_firmware to a higher version than -; Upgrade cisco sf302-08pp_firmware to a higher version than -; Upgrade cisco sf302-08mpp_firmware to a higher version than -; Upgrade cisco sg300-10pp_firmware to a higher version than -; Upgrade cisco sg300-10mpp_firmware to a higher version than -; Upgrade cisco sf300-24pp_firmware to a higher version than -; Upgrade cisco sf300-48pp_firmware to a higher version than -; Upgrade cisco sg300-28pp_firmware to a higher version than -; Upgrade cisco sf300-08_firmware to a higher version than -; Upgrade cisco sf300-48p_firmware to a higher version than -; Upgrade cisco sg300-10mp_firmware to a higher version than -; Upgrade cisco sg300-10p_firmware to a higher version than -; Upgrade cisco sg300-10_firmware to a higher version than -; Upgrade cisco sg300-28p_firmware to a higher version than -; Upgrade cisco sf300-24p_firmware to a higher version than -; Upgrade cisco sf302-08mp_firmware to a higher version than -; Upgrade cisco sg300-28_firmware to a higher version than -; Upgrade cisco sf300-48_firmware to a higher version than -; Upgrade cisco sg300-20_firmware to a higher version than -; Upgrade cisco sf302-08p_firmware to a higher version than -; Upgrade cisco sg300-52_firmware to a higher version than -; Upgrade cisco sf300-24_firmware to a higher version than -; Upgrade cisco sf302-08_firmware to a higher version than -; Upgrade cisco sf300-24mp_firmware to a higher version than -; Upgrade cisco sg300-10sfp_firmware to a higher version than -; Upgrade cisco sg300-28mp_firmware to a higher version than -; Upgrade cisco sg300-52p_firmware to a higher version than -; Upgrade cisco sg300-52mp_firmware to a higher version than -; Upgrade cisco sg500-28mpp_firmware to a higher version than -; Upgrade cisco sg500-52mp_firmware to a higher version than -; Upgrade cisco sg500xg-8f8t_firmware to a higher version than -; Upgrade cisco sf500-24_firmware to a higher version than -; Upgrade cisco sf500-24p_firmware to a higher version than -; Upgrade cisco sf500-48_firmware to a higher version than -; Upgrade cisco sf500-48p_firmware to a higher version than -; Upgrade cisco sg500-28_firmware to a higher version than -; Upgrade cisco sg500-28p_firmware to a higher version than -; Upgrade cisco sg500-52_firmware to a higher version than -; Upgrade cisco sg500-52p_firmware to a higher version than -; Upgrade cisco sg500x-24_firmware to a higher version than -; Upgrade cisco sg500x-24p_firmware to a higher version than -; Upgrade cisco sg500x-48_firmware to a higher version than -; Upgrade cisco sg500x-48p_firmware to a higher version than -