Skip to content
fr Sign in
7.5 High

CVE-2019-1892 A vulnerability in the Secure Sockets Layer (SSL) input packet processor of Cisco Small Business 200, 300, and 500…

Description

A vulnerability in the Secure Sockets Layer (SSL) input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a memory corruption on an affected device. The vulnerability is due to improper validation of HTTPS packets. An attacker could exploit this vulnerability by sending a malformed HTTPS packet to the management web interface of the affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a denial of service (DoS) condition.

Affected products and versions

Product Affected versions Fixed in
Cisco Small Business 300 Series Managed Switches 1.4 earliest → < 1.4.10.6 1.4.10.6

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Small Business 300 Series Managed Switches

The 7 CVEs of Cisco Small Business 300 Series Managed Switches →
CVE-2020-3147 A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to… 8.6 High CVE-2019-1943 A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an… 4.7 Medium CVE-2019-1891 A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an… 7.5 High CVE-2019-1814 A vulnerability in the interactions between the DHCP and TFTP features for Cisco Small Business 300 Series (Sx300)… 6.8 Medium
Track this CVE