CVE-2017-6720
Medium
Description
A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of SSH connections. An attacker could exploit this vulnerability by logging in to an affected switch via SSH and sending a malicious SSH message. This vulnerability affects the following Cisco products when SSH is enabled: Small Business 300 Series Managed Switches, Small Business 500 Series Stackable Managed Switches, 350 Series Managed Switches, 350X Series Stackable Managed Switches, 550X Series Stackable Managed Switches, ESW2 Series Advanced Switches. Cisco Bug IDs: CSCvb48377.
SeverityMedium
CVSS6.5
Exploit probability—
Product
Cisco Sf302-08pp Firmware
PublishedSep 21, 2017
First seenSep 21, 2017
Weakness typeCWE-119Memory buffer bounds error
How to fix
Update
- cisco sf302-08pp_firmware1.4.8.06 or later
- cisco sf302-08mpp_firmware1.4.8.06 or later
- cisco sg300-10pp_firmware1.4.8.06 or later
- cisco sg300-10mpp_firmware1.4.8.06 or later
- cisco sf300-24pp_firmware1.4.8.06 or later
- cisco sf300-48pp_firmware1.4.8.06 or later
- cisco sg300-28pp_firmware1.4.8.06 or later
- cisco sf300-08_firmware1.4.8.06 or later
- cisco sf300-48p_firmware1.4.8.06 or later
- cisco sg300-10mp_firmware1.4.8.06 or later
- cisco sg300-10p_firmware1.4.8.06 or later
- cisco sg300-10_firmware1.4.8.06 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco sf302-08pp_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sf302-08mpp_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg300-10pp_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg300-10mpp_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sf300-24pp_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sf300-48pp_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg300-28pp_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sf300-08_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sf300-48p_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg300-10mp_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg300-10p_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg300-10_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg300-28p_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sf300-24p_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sf302-08mp_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg300-28_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sf300-48_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg300-20_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sf302-08p_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg300-52_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sf300-24_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sf302-08_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sf300-24mp_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg300-10sfp_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg300-28mp_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg300-52p_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg300-52mp_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg500-28mpp_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg500-52mp_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg500xg-8f8t_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sf500-24_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sf500-24p_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sf500-48_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sf500-48p_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg500-28_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg500-28p_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg500-52_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg500-52p_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg500x-24_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg500x-24p_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg500x-48_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg500x-48p_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco esw2-350g-52_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco esw2-350g-52dc_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco esw2-550x-48_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco esw2-550x-48dc_firmware | v < 1.4.8.06 | 1.4.8.06 |
| cisco sg350-10_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg350-10p_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg350-10mp_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg355-10p_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg350-28_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg350-28p_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg350-28mp_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sf350-48_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sf350-48p_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sf350-48mp_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg350xg-2f10_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg350xg-24f_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg350xg-24t_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg350xg-48t_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg350x-24_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg350x-24p_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg350x-24mp_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg350x-48_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg350x-48p_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg350x-48mp_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sx550x-16ft_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sx550x-24ft_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sx550x-12f_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sx550x-24f_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sx550x-24_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sx550x-52_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg550x-24_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg550x-24p_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg550x-24mp_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg550x-24mpp_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg550x-48_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg550x-48p_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sg550x-48mp_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sf550x-24_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sf550x-24p_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sf550x-24mp_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sf550x-48_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sf550x-48p_firmware | v < 2.3.0.130 | 2.3.0.130 |
| cisco sf550x-48mp_firmware | v < 2.3.0.130 | 2.3.0.130 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.