Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2020-3121 Details

Description

A vulnerability in the web-based management interface of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected device. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link and access a specific page. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.1 MEDIUMVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CNA: [email protected]CVSS-B:6.1 MEDIUMVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200122-sbsms-xss	CVE	Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20200122-sbsms-xss	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	[email protected]
CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')	[email protected]

Affected Products

Product	Versions
cisco sg250x-24 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250x-24_firmware:::::::: Remediation No remediation found in references.
cisco sg250x-24	All versions
CPE cpe:2.3:h:cisco:sg250x-24:-:::::::* Remediation No remediation found in references.
cisco sg250x-24p firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250x-24p_firmware:::::::: Remediation No remediation found in references.
cisco sg250x-24p	All versions
CPE cpe:2.3:h:cisco:sg250x-24p:-:::::::* Remediation No remediation found in references.
cisco sg250x-48 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250x-48_firmware:::::::: Remediation No remediation found in references.
cisco sg250x-48	All versions
CPE cpe:2.3:h:cisco:sg250x-48:-:::::::* Remediation No remediation found in references.
cisco sg250x-48p firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250x-48p_firmware:::::::: Remediation No remediation found in references.
cisco sg250x-48p	All versions
CPE cpe:2.3:h:cisco:sg250x-48p:-:::::::* Remediation No remediation found in references.
cisco sg250-08 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250-08_firmware:::::::: Remediation No remediation found in references.
cisco sg250-08	All versions
CPE cpe:2.3:h:cisco:sg250-08:-:::::::* Remediation No remediation found in references.
cisco sg250-08hp firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250-08hp_firmware:::::::: Remediation No remediation found in references.
cisco sg250-08hp	All versions
CPE cpe:2.3:h:cisco:sg250-08hp:-:::::::* Remediation No remediation found in references.
cisco sg250-10p firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250-10p_firmware:::::::: Remediation No remediation found in references.
cisco sg250-10p	All versions
CPE cpe:2.3:h:cisco:sg250-10p:-:::::::* Remediation No remediation found in references.
cisco sg250-18 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250-18_firmware:::::::: Remediation No remediation found in references.
cisco sg250-18	All versions
CPE cpe:2.3:h:cisco:sg250-18:-:::::::* Remediation No remediation found in references.
cisco sg250-26 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250-26_firmware:::::::: Remediation No remediation found in references.
cisco sg250-26	All versions
CPE cpe:2.3:h:cisco:sg250-26:-:::::::* Remediation No remediation found in references.
cisco sg250-26hp firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250-26hp_firmware:::::::: Remediation No remediation found in references.
cisco sg250-26hp	All versions
CPE cpe:2.3:h:cisco:sg250-26hp:-:::::::* Remediation No remediation found in references.
cisco sg250-26p firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250-26p_firmware:::::::: Remediation No remediation found in references.
cisco sg250-26p	All versions
CPE cpe:2.3:h:cisco:sg250-26p:-:::::::* Remediation No remediation found in references.
cisco sg250-50 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250-50_firmware:::::::: Remediation No remediation found in references.
cisco sg250-50	All versions
CPE cpe:2.3:h:cisco:sg250-50:-:::::::* Remediation No remediation found in references.
cisco sg250-50hp firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250-50hp_firmware:::::::: Remediation No remediation found in references.
cisco sg250-50hp	All versions
CPE cpe:2.3:h:cisco:sg250-50hp:-:::::::* Remediation No remediation found in references.
cisco sg250-50p firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250-50p_firmware:::::::: Remediation No remediation found in references.
cisco sg250-50p	All versions
CPE cpe:2.3:h:cisco:sg250-50p:-:::::::* Remediation No remediation found in references.
cisco sg250-24 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250-24_firmware:::::::: Remediation No remediation found in references.
cisco sg250-24	All versions
CPE cpe:2.3:h:cisco:sg250-24:-:::::::* Remediation No remediation found in references.
cisco sg250-24p firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250-24p_firmware:::::::: Remediation No remediation found in references.
cisco sg250-24p	All versions
CPE cpe:2.3:h:cisco:sg250-24p:-:::::::* Remediation No remediation found in references.
cisco sg250-48 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250-48_firmware:::::::: Remediation No remediation found in references.
cisco sg250-48	All versions
CPE cpe:2.3:h:cisco:sg250-48:-:::::::* Remediation No remediation found in references.
cisco sg250-48hp firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg250-48hp_firmware:::::::: Remediation No remediation found in references.
cisco sg250-48hp	All versions
CPE cpe:2.3:h:cisco:sg250-48hp:-:::::::* Remediation No remediation found in references.
cisco sf350-48 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sf350-48_firmware:::::::: Remediation No remediation found in references.
cisco sf350-48	All versions
CPE cpe:2.3:h:cisco:sf350-48:-:::::::* Remediation No remediation found in references.
cisco sf350-48p firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sf350-48p_firmware:::::::: Remediation No remediation found in references.
cisco sf350-48p	All versions
CPE cpe:2.3:h:cisco:sf350-48p:-:::::::* Remediation No remediation found in references.
cisco sf350-48mp firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sf350-48mp_firmware:::::::: Remediation No remediation found in references.
cisco sf350-48mp	All versions
CPE cpe:2.3:h:cisco:sf350-48mp:-:::::::* Remediation No remediation found in references.
cisco sg350-10 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg350-10_firmware:::::::: Remediation No remediation found in references.
cisco sg350-10	All versions
CPE cpe:2.3:h:cisco:sg350-10:-:::::::* Remediation No remediation found in references.
cisco sg350-10p firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg350-10p_firmware:::::::: Remediation No remediation found in references.
cisco sg350-10p	All versions
CPE cpe:2.3:h:cisco:sg350-10p:-:::::::* Remediation No remediation found in references.
cisco sg350-10mp firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg350-10mp_firmware:::::::: Remediation No remediation found in references.
cisco sg350-10mp	All versions
CPE cpe:2.3:h:cisco:sg350-10mp:-:::::::* Remediation No remediation found in references.
cisco sg355-10mp firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg355-10mp_firmware:::::::: Remediation No remediation found in references.
cisco sg355-10mp	All versions
CPE cpe:2.3:h:cisco:sg355-10mp:-:::::::* Remediation No remediation found in references.
cisco sg350-28 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg350-28_firmware:::::::: Remediation No remediation found in references.
cisco sg350-28	All versions
CPE cpe:2.3:h:cisco:sg350-28:-:::::::* Remediation No remediation found in references.
cisco sg350-28p firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg350-28p_firmware:::::::: Remediation No remediation found in references.
cisco sg350-28p	All versions
CPE cpe:2.3:h:cisco:sg350-28p:-:::::::* Remediation No remediation found in references.
cisco sg350-28mp firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg350-28mp_firmware:::::::: Remediation No remediation found in references.
cisco sg350-28mp	All versions
CPE cpe:2.3:h:cisco:sg350-28mp:-:::::::* Remediation No remediation found in references.
cisco sx550x-16ft firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sx550x-16ft_firmware:::::::: Remediation No remediation found in references.
cisco sx550x-16ft	All versions
CPE cpe:2.3:h:cisco:sx550x-16ft:-:::::::* Remediation No remediation found in references.
cisco sx550x-24ft firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sx550x-24ft_firmware:::::::: Remediation No remediation found in references.
cisco sx550x-24ft	All versions
CPE cpe:2.3:h:cisco:sx550x-24ft:-:::::::* Remediation No remediation found in references.
cisco sx550x-12ft firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sx550x-12ft_firmware:::::::: Remediation No remediation found in references.
cisco sx550x-12ft	All versions
CPE cpe:2.3:h:cisco:sx550x-12ft:-:::::::* Remediation No remediation found in references.
cisco sx550x-24 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sx550x-24_firmware:::::::: Remediation No remediation found in references.
cisco sx550x-24	All versions
CPE cpe:2.3:h:cisco:sx550x-24:-:::::::* Remediation No remediation found in references.
cisco sx550x-52 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sx550x-52_firmware:::::::: Remediation No remediation found in references.
cisco sx550x-52	All versions
CPE cpe:2.3:h:cisco:sx550x-52:-:::::::* Remediation No remediation found in references.
cisco sg550x-24 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg550x-24_firmware:::::::: Remediation No remediation found in references.
cisco sg550x-24	All versions
CPE cpe:2.3:h:cisco:sg550x-24:-:::::::* Remediation No remediation found in references.
cisco sg550x-24p firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg550x-24p_firmware:::::::: Remediation No remediation found in references.
cisco sg550x-24p	All versions
CPE cpe:2.3:h:cisco:sg550x-24p:-:::::::* Remediation No remediation found in references.
cisco sg550x-24mp firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg550x-24mp_firmware:::::::: Remediation No remediation found in references.
cisco sg550x-24mp	All versions
CPE cpe:2.3:h:cisco:sg550x-24mp:-:::::::* Remediation No remediation found in references.
cisco sg550x-24mpp firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg550x-24mpp_firmware:::::::: Remediation No remediation found in references.
cisco sg550x-24mpp	All versions
CPE cpe:2.3:h:cisco:sg550x-24mpp:-:::::::* Remediation No remediation found in references.
cisco sg550x-48 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg550x-48_firmware:::::::: Remediation No remediation found in references.
cisco sg550x-48	All versions
CPE cpe:2.3:h:cisco:sg550x-48:-:::::::* Remediation No remediation found in references.
cisco sg550x-48p firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg550x-48p_firmware:::::::: Remediation No remediation found in references.
cisco sg550x-48p	All versions
CPE cpe:2.3:h:cisco:sg550x-48p:-:::::::* Remediation No remediation found in references.
cisco sg550x-48mp firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sg550x-48mp_firmware:::::::: Remediation No remediation found in references.
cisco sg550x-48mp	All versions
CPE cpe:2.3:h:cisco:sg550x-48mp:-:::::::* Remediation No remediation found in references.
cisco sf550x-24 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sf550x-24_firmware:::::::: Remediation No remediation found in references.
cisco sf550x-24	All versions
CPE cpe:2.3:h:cisco:sf550x-24:-:::::::* Remediation No remediation found in references.
cisco sf550x-24p firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sf550x-24p_firmware:::::::: Remediation No remediation found in references.
cisco sf550x-24p	All versions
CPE cpe:2.3:h:cisco:sf550x-24p:-:::::::* Remediation No remediation found in references.
cisco sf550x-48 firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sf550x-48_firmware:::::::: Remediation No remediation found in references.
cisco sf550x-48	All versions
CPE cpe:2.3:h:cisco:sf550x-48:-:::::::* Remediation No remediation found in references.
cisco sf550x-48p firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sf550x-48p_firmware:::::::: Remediation No remediation found in references.
cisco sf550x-48p	All versions
CPE cpe:2.3:h:cisco:sf550x-48p:-:::::::* Remediation No remediation found in references.
cisco sf550x-48mp firmware	<= 2.5.0.90
CPE cpe:2.3:o:cisco:sf550x-48mp_firmware:::::::: Remediation No remediation found in references.
cisco sf550x-48mp	All versions
CPE cpe:2.3:h:cisco:sf550x-48mp:-:::::::* Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Jan 31, 2020	Initial Analysis	[email protected]

CVE-2020-3121 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation