Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2020-3147 Details

Description

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper validation of requests sent to the web interface. An attacker could exploit this vulnerability by sending a malicious request to the web interface of an affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition. This vulnerability affects firmware releases prior than 1.3.7.18

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CNA: [email protected]CVSS-B:8.6 HIGHVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smlbus-switch-dos-R6VquS2u	CVE	Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smlbus-switch-dos-R6VquS2u	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-20	Improper Input Validation	[email protected]
CWE-20	Improper Input Validation	[email protected]

Affected Products

Product	Versions
cisco sg200-50 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg200-50_firmware:::::::: Remediation No remediation found in references.
cisco sg200-50	All versions
CPE cpe:2.3:h:cisco:sg200-50:-:::::::* Remediation No remediation found in references.
cisco sg200-50p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg200-50p_firmware:::::::: Remediation No remediation found in references.
cisco sg200-50p	All versions
CPE cpe:2.3:h:cisco:sg200-50p:-:::::::* Remediation No remediation found in references.
cisco sg200-50fp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg200-50fp_firmware:::::::: Remediation No remediation found in references.
cisco sg200-50fp	All versions
CPE cpe:2.3:h:cisco:sg200-50fp:-:::::::* Remediation No remediation found in references.
cisco sg200-26 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg200-26_firmware:::::::: Remediation No remediation found in references.
cisco sg200-26	All versions
CPE cpe:2.3:h:cisco:sg200-26:-:::::::* Remediation No remediation found in references.
cisco sg200-26p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg200-26p_firmware:::::::: Remediation No remediation found in references.
cisco sg200-26p	All versions
CPE cpe:2.3:h:cisco:sg200-26p:-:::::::* Remediation No remediation found in references.
cisco sg200-26fp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg200-26fp_firmware:::::::: Remediation No remediation found in references.
cisco sg200-26fp	All versions
CPE cpe:2.3:h:cisco:sg200-26fp:-:::::::* Remediation No remediation found in references.
cisco sg200-18 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg200-18_firmware:::::::: Remediation No remediation found in references.
cisco sg200-18	All versions
CPE cpe:2.3:h:cisco:sg200-18:-:::::::* Remediation No remediation found in references.
cisco sg200-10fp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg200-10fp_firmware:::::::: Remediation No remediation found in references.
cisco sg200-10fp	All versions
CPE cpe:2.3:h:cisco:sg200-10fp:-:::::::* Remediation No remediation found in references.
cisco sg200-08 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg200-08_firmware:::::::: Remediation No remediation found in references.
cisco sg200-08	All versions
CPE cpe:2.3:h:cisco:sg200-08:-:::::::* Remediation No remediation found in references.
cisco sg200-08p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg200-08p_firmware:::::::: Remediation No remediation found in references.
cisco sg200-08p	All versions
CPE cpe:2.3:h:cisco:sg200-08p:-:::::::* Remediation No remediation found in references.
cisco sg200-24 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg200-24_firmware:::::::: Remediation No remediation found in references.
cisco sg200-24	All versions
CPE cpe:2.3:h:cisco:sg200-24:-:::::::* Remediation No remediation found in references.
cisco sg200-24p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg200-24p_firmware:::::::: Remediation No remediation found in references.
cisco sg200-24p	All versions
CPE cpe:2.3:h:cisco:sg200-24p:-:::::::* Remediation No remediation found in references.
cisco sg200-24fp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg200-24fp_firmware:::::::: Remediation No remediation found in references.
cisco sg200-24fp	All versions
CPE cpe:2.3:h:cisco:sg200-24fp:-:::::::* Remediation No remediation found in references.
cisco sg200-48 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg200-48_firmware:::::::: Remediation No remediation found in references.
cisco sg200-48	All versions
CPE cpe:2.3:h:cisco:sg200-48:-:::::::* Remediation No remediation found in references.
cisco sg200-48p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg200-48p_firmware:::::::: Remediation No remediation found in references.
cisco sg200-48p	All versions
CPE cpe:2.3:h:cisco:sg200-48p:-:::::::* Remediation No remediation found in references.
cisco sf302-08pp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf302-08pp_firmware:::::::: Remediation No remediation found in references.
cisco sf302-08pp	All versions
CPE cpe:2.3:h:cisco:sf302-08pp:-:::::::* Remediation No remediation found in references.
cisco sf302-08mpp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf302-08mpp_firmware:::::::: Remediation No remediation found in references.
cisco sf302-08mpp	All versions
CPE cpe:2.3:h:cisco:sf302-08mpp:-:::::::* Remediation No remediation found in references.
cisco sg300-10pp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg300-10pp_firmware:::::::: Remediation No remediation found in references.
cisco sg300-10pp	All versions
CPE cpe:2.3:h:cisco:sg300-10pp:-:::::::* Remediation No remediation found in references.
cisco sg300-10mpp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg300-10mpp_firmware:::::::: Remediation No remediation found in references.
cisco sg300-10mpp	All versions
CPE cpe:2.3:h:cisco:sg300-10mpp:-:::::::* Remediation No remediation found in references.
cisco sf300-24pp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf300-24pp_firmware:::::::: Remediation No remediation found in references.
cisco sf300-24pp	All versions
CPE cpe:2.3:h:cisco:sf300-24pp:-:::::::* Remediation No remediation found in references.
cisco sf300-48pp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf300-48pp_firmware:::::::: Remediation No remediation found in references.
cisco sf300-48pp	All versions
CPE cpe:2.3:h:cisco:sf300-48pp:-:::::::* Remediation No remediation found in references.
cisco sg300-28pp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg300-28pp_firmware:::::::: Remediation No remediation found in references.
cisco sg300-28pp	All versions
CPE cpe:2.3:h:cisco:sg300-28pp:-:::::::* Remediation No remediation found in references.
cisco sf300-08 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf300-08_firmware:::::::: Remediation No remediation found in references.
cisco sf300-08	All versions
CPE cpe:2.3:h:cisco:sf300-08:-:::::::* Remediation No remediation found in references.
cisco sf300-48p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf300-48p_firmware:::::::: Remediation No remediation found in references.
cisco sf300-48p	All versions
CPE cpe:2.3:h:cisco:sf300-48p:-:::::::* Remediation No remediation found in references.
cisco sg300-10mp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg300-10mp_firmware:::::::: Remediation No remediation found in references.
cisco sg300-10mp	All versions
CPE cpe:2.3:h:cisco:sg300-10mp:-:::::::* Remediation No remediation found in references.
cisco sg300-10p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg300-10p_firmware:::::::: Remediation No remediation found in references.
cisco sg300-10p	All versions
CPE cpe:2.3:h:cisco:sg300-10p:-:::::::* Remediation No remediation found in references.
cisco sg300-10 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg300-10_firmware:::::::: Remediation No remediation found in references.
cisco sg300-10	All versions
CPE cpe:2.3:h:cisco:sg300-10:-:::::::* Remediation No remediation found in references.
cisco sg300-28p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg300-28p_firmware:::::::: Remediation No remediation found in references.
cisco sg300-28p	All versions
CPE cpe:2.3:h:cisco:sg300-28p:-:::::::* Remediation No remediation found in references.
cisco sf300-24p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf300-24p_firmware:::::::: Remediation No remediation found in references.
cisco sf300-24p	All versions
CPE cpe:2.3:h:cisco:sf300-24p:-:::::::* Remediation No remediation found in references.
cisco sf302-08mp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf302-08mp_firmware:::::::: Remediation No remediation found in references.
cisco sf302-08mp	All versions
CPE cpe:2.3:h:cisco:sf302-08mp:-:::::::* Remediation No remediation found in references.
cisco sg300-28 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg300-28_firmware:::::::: Remediation No remediation found in references.
cisco sg300-28	All versions
CPE cpe:2.3:h:cisco:sg300-28:-:::::::* Remediation No remediation found in references.
cisco sf300-48 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf300-48_firmware:::::::: Remediation No remediation found in references.
cisco sf300-48	All versions
CPE cpe:2.3:h:cisco:sf300-48:-:::::::* Remediation No remediation found in references.
cisco sg300-20 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg300-20_firmware:::::::: Remediation No remediation found in references.
cisco sg300-20	All versions
CPE cpe:2.3:h:cisco:sg300-20:-:::::::* Remediation No remediation found in references.
cisco sf302-08p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf302-08p_firmware:::::::: Remediation No remediation found in references.
cisco sf302-08p	All versions
CPE cpe:2.3:h:cisco:sf302-08p:-:::::::* Remediation No remediation found in references.
cisco sg300-52 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg300-52_firmware:::::::: Remediation No remediation found in references.
cisco sg300-52	All versions
CPE cpe:2.3:h:cisco:sg300-52:-:::::::* Remediation No remediation found in references.
cisco sf300-24 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf300-24_firmware:::::::: Remediation No remediation found in references.
cisco sf300-24	All versions
CPE cpe:2.3:h:cisco:sf300-24:-:::::::* Remediation No remediation found in references.
cisco sf302-08 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf302-08_firmware:::::::: Remediation No remediation found in references.
cisco sf302-08	All versions
CPE cpe:2.3:h:cisco:sf302-08:-:::::::* Remediation No remediation found in references.
cisco sf300-24mp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf300-24mp_firmware:::::::: Remediation No remediation found in references.
cisco sf300-24mp	All versions
CPE cpe:2.3:h:cisco:sf300-24mp:-:::::::* Remediation No remediation found in references.
cisco sg300-10sfp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg300-10sfp_firmware:::::::: Remediation No remediation found in references.
cisco sg300-10sfp	All versions
CPE cpe:2.3:h:cisco:sg300-10sfp:-:::::::* Remediation No remediation found in references.
cisco sg300-28mp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg300-28mp_firmware:::::::: Remediation No remediation found in references.
cisco sg300-28mp	All versions
CPE cpe:2.3:h:cisco:sg300-28mp:-:::::::* Remediation No remediation found in references.
cisco sg300-52p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg300-52p_firmware:::::::: Remediation No remediation found in references.
cisco sg300-52p	All versions
CPE cpe:2.3:h:cisco:sg300-52p:-:::::::* Remediation No remediation found in references.
cisco sg300-52mp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg300-52mp_firmware:::::::: Remediation No remediation found in references.
cisco sg300-52mp	All versions
CPE cpe:2.3:h:cisco:sg300-52mp:-:::::::* Remediation No remediation found in references.
cisco sg500-28mpp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg500-28mpp_firmware:::::::: Remediation No remediation found in references.
cisco sg500-28mpp	All versions
CPE cpe:2.3:h:cisco:sg500-28mpp:-:::::::* Remediation No remediation found in references.
cisco sg500-52mp firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg500-52mp_firmware:::::::: Remediation No remediation found in references.
cisco sg500-52mp	All versions
CPE cpe:2.3:h:cisco:sg500-52mp:-:::::::* Remediation No remediation found in references.
cisco sg500xg-8f8t firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg500xg-8f8t_firmware:::::::: Remediation No remediation found in references.
cisco sg500xg-8f8t	All versions
CPE cpe:2.3:h:cisco:sg500xg-8f8t:-:::::::* Remediation No remediation found in references.
cisco sf500-24 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf500-24_firmware:::::::: Remediation No remediation found in references.
cisco sf500-24	All versions
CPE cpe:2.3:h:cisco:sf500-24:-:::::::* Remediation No remediation found in references.
cisco sf500-24p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf500-24p_firmware:::::::: Remediation No remediation found in references.
cisco sf500-24p	All versions
CPE cpe:2.3:h:cisco:sf500-24p:-:::::::* Remediation No remediation found in references.
cisco sf500-48 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf500-48_firmware:::::::: Remediation No remediation found in references.
cisco sf500-48	All versions
CPE cpe:2.3:h:cisco:sf500-48:-:::::::* Remediation No remediation found in references.
cisco sf500-48p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sf500-48p_firmware:::::::: Remediation No remediation found in references.
cisco sf500-48p	All versions
CPE cpe:2.3:h:cisco:sf500-48p:-:::::::* Remediation No remediation found in references.
cisco sg500-28 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg500-28_firmware:::::::: Remediation No remediation found in references.
cisco sg500-28	All versions
CPE cpe:2.3:h:cisco:sg500-28:-:::::::* Remediation No remediation found in references.
cisco sg500-28p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg500-28p_firmware:::::::: Remediation No remediation found in references.
cisco sg500-28p	All versions
CPE cpe:2.3:h:cisco:sg500-28p:-:::::::* Remediation No remediation found in references.
cisco sg500-52 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg500-52_firmware:::::::: Remediation No remediation found in references.
cisco sg500-52	All versions
CPE cpe:2.3:h:cisco:sg500-52:-:::::::* Remediation No remediation found in references.
cisco sg500-52p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg500-52p_firmware:::::::: Remediation No remediation found in references.
cisco sg500-52p	All versions
CPE cpe:2.3:h:cisco:sg500-52p:-:::::::* Remediation No remediation found in references.
cisco sg500x-24 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg500x-24_firmware:::::::: Remediation No remediation found in references.
cisco sg500x-24	All versions
CPE cpe:2.3:h:cisco:sg500x-24:-:::::::* Remediation No remediation found in references.
cisco sg500x-24p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg500x-24p_firmware:::::::: Remediation No remediation found in references.
cisco sg500x-24p	All versions
CPE cpe:2.3:h:cisco:sg500x-24p:-:::::::* Remediation No remediation found in references.
cisco sg500x-48 firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg500x-48_firmware:::::::: Remediation No remediation found in references.
cisco sg500x-48	All versions
CPE cpe:2.3:h:cisco:sg500x-48:-:::::::* Remediation No remediation found in references.
cisco sg500x-48p firmware	< 1.3.7.18
CPE cpe:2.3:o:cisco:sg500x-48p_firmware:::::::: Remediation No remediation found in references.
cisco sg500x-48p	All versions
CPE cpe:2.3:h:cisco:sg500x-48p:-:::::::* Remediation No remediation found in references.

Change History

5 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Feb 1, 2020	Initial Analysis	[email protected]

CVE-2020-3147 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation