CVE-2019-1814

High

Description

A vulnerability in the interactions between the DHCP and TFTP features for Cisco Small Business 300 Series (Sx300) Managed Switches could allow an unauthenticated, remote attacker to cause the device to become low on system memory, which in turn could lead to an unexpected reload of the device and result in a denial of service (DoS) condition on an affected device. The vulnerability is due to a failure to free system memory when an unexpected DHCP request is received. An attacker could exploit this vulnerability by sending a crafted DHCP packet to the targeted device. A successful exploit could allow the attacker to cause an unexpected reload of the device.

SeverityHigh

CVSS8.6

Exploit probability—

Product

Cisco Sf302-08pp Firmware

PublishedMay 16, 2019

First seenMay 16, 2019

Weakness typeCWE-400Uncontrolled resource consumption

How to fix

Update

cisco sf302-08pp_firmware1.4.10.6 or later
cisco sf302-08mpp_firmware1.4.10.6 or later
cisco sg300-10pp_firmware1.4.10.6 or later
cisco sg300-10mpp_firmware1.4.10.6 or later
cisco sf300-24pp_firmware1.4.10.6 or later
cisco sf300-48pp_firmware1.4.10.6 or later
cisco sg300-28pp_firmware1.4.10.6 or later
cisco sf300-08_firmware1.4.10.6 or later
cisco sf300-48p_firmware1.4.10.6 or later
cisco sg300-10mp_firmware1.4.10.6 or later
cisco sg300-10p_firmware1.4.10.6 or later
cisco sg300-10_firmware1.4.10.6 or later

Vendor advisories

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-sb300sms-dhcp

Affected products

Product	Affected versions	Fixed in
cisco sf302-08pp_firmware	v < 1.4.10.6	1.4.10.6
cisco sf302-08mpp_firmware	v < 1.4.10.6	1.4.10.6
cisco sg300-10pp_firmware	v < 1.4.10.6	1.4.10.6
cisco sg300-10mpp_firmware	v < 1.4.10.6	1.4.10.6
cisco sf300-24pp_firmware	v < 1.4.10.6	1.4.10.6
cisco sf300-48pp_firmware	v < 1.4.10.6	1.4.10.6
cisco sg300-28pp_firmware	v < 1.4.10.6	1.4.10.6
cisco sf300-08_firmware	v < 1.4.10.6	1.4.10.6
cisco sf300-48p_firmware	v < 1.4.10.6	1.4.10.6
cisco sg300-10mp_firmware	v < 1.4.10.6	1.4.10.6
cisco sg300-10p_firmware	v < 1.4.10.6	1.4.10.6
cisco sg300-10_firmware	v < 1.4.10.6	1.4.10.6
cisco sg300-28p_firmware	v < 1.4.10.6	1.4.10.6
cisco sf300-24p_firmware	v < 1.4.10.6	1.4.10.6
cisco sf302-08mp_firmware	v < 1.4.10.6	1.4.10.6
cisco sg300-28_firmware	v < 1.4.10.6	1.4.10.6
cisco sf300-48_firmware	v < 1.4.10.6	1.4.10.6
cisco sg300-20_firmware	v < 1.4.10.6	1.4.10.6
cisco sf302-08p_firmware	v < 1.4.10.6	1.4.10.6
cisco sg300-52_firmware	v < 1.4.10.6	1.4.10.6
cisco sf300-24_firmware	v < 1.4.10.6	1.4.10.6
cisco sf302-08_firmware	v < 1.4.10.6	1.4.10.6
cisco sf300-24mp_firmware	v < 1.4.10.6	1.4.10.6
cisco sg300-10sfp_firmware	v < 1.4.10.6	1.4.10.6
cisco sg300-28mp_firmware	v < 1.4.10.6	1.4.10.6
cisco sg300-52p_firmware	v < 1.4.10.6	1.4.10.6
cisco sg300-52mp_firmware	v < 1.4.10.6	1.4.10.6

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.