CVE-2022-31734: cisco systems, inc. cisco catalyst 2940 series switches Cross-site Scripting
Vulnerability summary
CVE-2022-31734 is a medium (CVSS 6.1) Cross-site Scripting vulnerability in cisco systems, inc. cisco catalyst 2940 series switches. EPSS estimates a 0.65% chance of exploitation in the next 30 days, higher than 50.1% of scored vulnerabilities.
Timeline
- 20-06-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
Cisco Catalyst 2940 Series Switches provided by Cisco Systems, Inc. contain a reflected cross-site scripting vulnerability regarding error page generation. An arbitrary script may be executed on the web browser of the user who is using the product. The affected firmware is prior to 12.2(50)SY released in 2011, and Cisco Catalyst 2940 Series Switches have been retired since January 2015
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
0.65%
Chance of exploitation in the next 30 days
Percentile
50%
Versus all other CVEs
30-day change
+0.01 pp
From 0.63% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco2 products
- ws-c2940-8tf-s_firmware< 12.2\(50\)sy
- ws-c2940-8tt-s_firmware< 12.2\(50\)sy
Cisco systems, inc.1 product
- cisco catalyst 2940 series switchesfirmware versions prior to 12.2(50)SY
2 vendors · 3 products
References
2 links- www.cisco.com/c/en/us/obsolete/switches/cisco-catalyst-2940-series-switches.htmlX Refsource MISCVendor Advisory