CVE:CVE-2019-12636
CNNVD:CNNVD-201910-1107
Cisco 250 Series Smart Switches等都是美国思科（Cisco）公司的产品。Cisco 250 Series Smart Switches是一款250系列智能交换机。Cisco 350 Series Managed Switches是一款350系列管理型交换机。550X Series Stackable Managed Switches是一款550X系列管理型交换机。
Cisco 250 Series Smart Switches、350 Series Managed Switches和550X Series Stackable Managed Switches中基于Web的管理界面存在跨站请求伪造漏洞，该漏洞源于程序没有进行充分的跨站请求伪造保护。远程攻击者可通过诱使该界面用户访问恶意的链接利用该漏洞以目标用户权限执行任意操作。
solution:Upgrade cisco sf250-24_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-24p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-48_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-48hp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-08_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-08hp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-10p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-18_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-26_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-26hp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-26p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-50_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-50hp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250-50p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250x-24_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250x-24p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250x-48_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf250x-48p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg350-10_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg350-10p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg350-10mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg355-10p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg350-28_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg350-28p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg350-28mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf350-48_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf350-48p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf350-48mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sx550x-16ft_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sx550x-24ft_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sx550x-12f_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sx550x-24f_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sx550x-24_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sx550x-52_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg550x-24_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg550x-24p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg550x-24mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg550x-24mpp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg550x-48_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg550x-48p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sg550x-48mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf550x-24_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf550x-24p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf550x-24mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf550x-48_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf550x-48p_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf550x-48mp_firmware to a higher version than 2.5.0.90,and avoid the version (,2.5.0.90); Upgrade cisco sf200-24_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf200-24fp_firmware to a higher version than 1.4.11,and avoid the version (,1.4.11); Upgrade cisco sf200-24p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf200-48_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf200-48p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf200e-24_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf200e-24p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf200e-48_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf200e48p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg200-08_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg200-08p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg200-10fp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg200-18_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg200-26_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg200-26fp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg200-26p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg200-50_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg200-50fp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg200-50p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf302-08pp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf302-08mpp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg300-10pp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg300-10mpp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf300-24pp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf300-48pp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg300-28pp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf300-08_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf300-48p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg300-10mp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg300-10p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg300-10_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg300-28p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf300-24p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf302-08mp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg300-28_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf300-48_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg300-20_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf302-08p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg300-52_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf300-24_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf302-08_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf300-24mp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg300-10sfp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg300-28mp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg300-52p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg300-52mp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg500-28mpp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg500-52mp_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg500xg-8f8t_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf500-24_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf500-24p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf500-48_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sf500-48p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg500-28_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg500-28p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg500-52_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg500-52p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg500x-24_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg500x-24p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg500x-48_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02); Upgrade cisco sg500x-48p_firmware to a higher version than 1.4.11.02,and avoid the version (,1.4.11.02)