CVE:CVE-2021-1541
CNNVD:CNNVD-202106-1307
Cisco Small Business 220 Series Smart Switches是美国思科（Cisco）公司的一款小型智能交换机设备。
Cisco Small Business 220 Series Smart Switches存在授权问题漏洞，该漏洞源于缺乏对 TFTP 配置参数的参数验证。利用该漏洞允许攻击者以 root 用户身份在底层操作系统上执行任意命令。
solution:Upgrade cisco sf220-24_firmware to a higher version than 1.2.0.6,and avoid the version (,1.2.0.6); Upgrade cisco sf220-24p_firmware to a higher version than 1.2.0.6,and avoid the version (,1.2.0.6); Upgrade cisco sf220-48_firmware to a higher version than 1.2.0.6,and avoid the version (,1.2.0.6); Upgrade cisco sf220-48p_firmware to a higher version than 1.2.0.6,and avoid the version (,1.2.0.6); Upgrade cisco sg220-26_firmware to a higher version than 1.2.0.6,and avoid the version (,1.2.0.6); Upgrade cisco sg220-26p_firmware to a higher version than 1.2.0.6,and avoid the version (,1.2.0.6); Upgrade cisco sg220-28mp_firmware to a higher version than 1.2.0.6,and avoid the version (,1.2.0.6); Upgrade cisco sg220-50_firmware to a higher version than 1.2.0.6,and avoid the version (,1.2.0.6); Upgrade cisco sg220-50p_firmware to a higher version than 1.2.0.6,and avoid the version (,1.2.0.6)