Reflected Cross-Site Scripting Vulnerability in Cisco Catalyst 2940 Series Switches

CVE-2022-31734

What is CVE-2022-31734?

Cisco Catalyst 2940 Series Switches are affected by a reflected cross-site scripting vulnerability that occurs during error page generation. This issue allows an attacker to inject arbitrary scripts, which could be executed in the web browser of users accessing the affected product. The vulnerability impacts any firmware version prior to 12.2(50)SY, and it's important to note that these switches were retired in January 2015, making them especially vulnerable to exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References