CVE:CVE-2018-0408
CNNVD:CNNVD-201808-011
Cisco Small Business 300 Series（Sx300）Managed Switches是美国思科（Cisco）公司的一款300系列的交换机设备。
Cisco Small Business 300 Series（Sx300）Managed Switches中基于Web的管理界面存在跨站脚本漏洞，该漏洞源于该界面没有充分的验证用户提交的输入。远程攻击者可通过诱使该界面用户点击特制的链接利用该漏洞在该界面的上下文中执行任意脚本代码或访问基于浏览器的敏感信息。
solution:Upgrade cisco sf300-08_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sf302-08_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sf302-08p_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sf302-08pp_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sf302-08mp_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sf302-08mpp_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sf300-24_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sf300-24p_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sf300-24pp_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sf300-24mp_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sf300-48_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sf300-48p_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sf300-48pp_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sg300-10_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sg300-10sfp_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sg300-10p_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sg300-10pp_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sg300-10mp_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sg300-10mpp_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sg300-20_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sg300-28_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sg300-28p_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sg300-28pp_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sg300-28mp_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sg300-52_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sg300-52p_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sg300-52mp_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]; Upgrade cisco sg300-28sfp_firmware to a higher version than 1.4.7.06,and avoid the version [1.4.7,1.4.7.06]