CVE-2016-1473

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-09-02 · updated 2026-06-17
Weakness: CWE-200

Description

Cisco Small Business 220 devices with firmware before 1.0.1.1 have a hardcoded SNMP community, which allows remote attackers to read or modify SNMP objects by leveraging knowledge of this community, aka Bug ID CSCuz76216.

Affected products

Cisco Small Business 220 Series Smart Plus Switches: 1.0.0.17, 1.0.0.18, 1.0.0.19

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-sps3
http://www.securityfocus.com/bid/92710
http://www.securitytracker.com/id/1036711
http://www.synacktiv.com/ressources/advisories_cisco_switch_sg220_default_snmp.pdf
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-sps3
http://www.securityfocus.com/bid/92710
http://www.securitytracker.com/id/1036711
http://www.synacktiv.com/ressources/advisories_cisco_switch_sg220_default_snmp.pdf

Get alerted when CVE-2016-1473 or the next vulnerability affects your stack