| CVE-2016-1473 | Cri | 0.64 | 9.8 | 0.03 | | Sep 2, 2016 | Cisco Small Business 220 devices with firmware before 1.0.1.1 have a hardcoded SNMP community, which allows remote attackers to read or modify SNMP objects by leveraging knowledge of this community, aka Bug ID CSCuz76216. |
| CVE-2016-1470 | Hig | 0.57 | 8.8 | 0.00 | | Sep 2, 2016 | Cross-site request forgery (CSRF) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuz76230. |
| CVE-2016-1472 | Hig | 0.49 | 7.5 | 0.01 | | Sep 2, 2016 | The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service (interface outage) via a crafted HTTP request, aka Bug ID CSCuz76238. |
| CVE-2016-1471 | Med | 0.40 | 6.1 | 0.00 | | Sep 2, 2016 | Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuz76232. |