Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-15993.
AI-analyzed exploit summary This exploit targets an information disclosure vulnerability in Dell EMC Networking PC5500 firmware and Cisco Sx/SMB devices. It retrieves SHA1 password hashes from the device's admin user settings and attempts to crack them using a provided password file.
Description
A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web UI of an affected device. A successful exploit could allow the attacker to access sensitive device information, which includes configuration files.
Exploits (1)
This exploit targets an information disclosure vulnerability in Dell EMC Networking PC5500 firmware and Cisco Sx/SMB devices. It retrieves SHA1 password hashes from the device's admin user settings and attempts to crack them using a provided password file.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N