CVE-2016-1299

5.3 mediumEPSS 1.3%

Medium (5.3) in cisco 300 series managed switch firmware. EPSS 1.3% chance of exploitation in the next 30 days.

The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a denial of service (HTTPS outage) via crafted HTTPS requests, aka Bug ID CSCuw87174.

Severity

CVSS 3.0

5.3 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2016-01-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cisco:300_series_managed_switch_firmware

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-sbms
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-sbms

Check your stack JSON