CVE-2026-20232
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A vulnerability in the web-based management interface of Cisco Industrial Ethernet 1000 Series Switches allows an authenticated remote attacker to perform a stored XSS attack. The issue is due to insufficient input validation, enabling injection of malicious code into interface pages.
Risk Assessment
An attacker can execute arbitrary script in another user's context, potentially leading to session theft, configuration changes, or further attacks within the interface.
Recommendation
Apply vendor updates, restrict access to the management interface, and regularly audit user permissions.
Other vulnerabilities in Cisco Industrial Ethernet 1000 Series Switches
See all- CVE-2017-6634High
A vulnerability in the Device Manager web interface of Cisco Industrial Ethernet 1000 Series Switches 1.3 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack against a user of an affected system. The vulnerability is due to insufficient CSRF protection by the Device Manager web interface.
- CVE-2026-20177Medium
A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet 1000 Series Switches allows an unauthenticated remote attacker to cause the device manager, SSH, or API to become inaccessible. The issue is due to insufficient protection against management plane flooding attacks.
Original NVD description (English source)
A vulnerability in the web-based management interface of Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of another user. To exploit this vulnerability, the attacker must have valid user credentials on the affected system.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS