Threat Investigation
Request a demo

CVE-2019-1859

High

Description

A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to bypass client-side certificate authentication and revert to password authentication. The vulnerability exists because OpenSSH mishandles the authentication process. An attacker could exploit this vulnerability by attempting to connect to the device via SSH. A successful exploit could allow the attacker to access the configuration as an administrative user if the default credentials are not changed. There are no workarounds available; however, if client-side certificate authentication is enabled, disable it and use strong password authentication. Client-side certificate authentication is disabled by default.

SeverityHigh
CVSS7.2
Exploit probability—
ProductCisco Sg200-50 Firmware
PublishedMay 3, 2019
First seenMay 3, 2019
Weakness typeCWE-285CWE-285

How to fix

Update
  • cisco sg200-50_firmware1.4.10.6 or later
  • cisco sg200-50p_firmware1.4.10.6 or later
  • cisco sg200-50fp_firmware1.4.10.6 or later
  • cisco sg200-26_firmware1.4.10.6 or later
  • cisco sg200-26p_firmware1.4.10.6 or later
  • cisco sg200-26fp_firmware1.4.10.6 or later
  • cisco sg200-18_firmware1.4.10.6 or later
  • cisco sg200-10fp_firmware1.4.10.6 or later
  • cisco sg200-08_firmware1.4.10.6 or later
  • cisco sg200-08p_firmware1.4.10.6 or later
  • cisco sf200-24_firmware1.4.10.6 or later
  • cisco sf200-24p_firmware1.4.10.6 or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
cisco sg200-50_firmwarev < 1.4.10.61.4.10.6
cisco sg200-50p_firmwarev < 1.4.10.61.4.10.6
cisco sg200-50fp_firmwarev < 1.4.10.61.4.10.6
cisco sg200-26_firmwarev < 1.4.10.61.4.10.6
cisco sg200-26p_firmwarev < 1.4.10.61.4.10.6
cisco sg200-26fp_firmwarev < 1.4.10.61.4.10.6
cisco sg200-18_firmwarev < 1.4.10.61.4.10.6
cisco sg200-10fp_firmwarev < 1.4.10.61.4.10.6
cisco sg200-08_firmwarev < 1.4.10.61.4.10.6
cisco sg200-08p_firmwarev < 1.4.10.61.4.10.6
cisco sf200-24_firmwarev < 1.4.10.61.4.10.6
cisco sf200-24p_firmwarev < 1.4.10.61.4.10.6
cisco sf200-24fp_firmwarev < 1.4.10.61.4.10.6
cisco sf200-48_firmwarev < 1.4.10.61.4.10.6
cisco sf200-48p_firmwarev < 1.4.10.61.4.10.6
cisco sf302-08pp_firmwarev < 1.4.10.61.4.10.6
cisco sf302-08mpp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10pp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10mpp_firmwarev < 1.4.10.61.4.10.6
cisco sf300-24pp_firmwarev < 1.4.10.61.4.10.6
cisco sf300-48pp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-28pp_firmwarev < 1.4.10.61.4.10.6
cisco sf300-08_firmwarev < 1.4.10.61.4.10.6
cisco sf300-48p_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10mp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10p_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10_firmwarev < 1.4.10.61.4.10.6
cisco sg300-28p_firmwarev < 1.4.10.61.4.10.6
cisco sf300-24p_firmwarev < 1.4.10.61.4.10.6
cisco sf302-08mp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-28_firmwarev < 1.4.10.61.4.10.6
cisco sf300-48_firmwarev < 1.4.10.61.4.10.6
cisco sg300-20_firmwarev < 1.4.10.61.4.10.6
cisco sf302-08p_firmwarev < 1.4.10.61.4.10.6
cisco sg300-52_firmwarev < 1.4.10.61.4.10.6
cisco sf300-24_firmwarev < 1.4.10.61.4.10.6
cisco sf302-08_firmwarev < 1.4.10.61.4.10.6
cisco sf300-24mp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10sfp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-28mp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-52p_firmwarev < 1.4.10.61.4.10.6
cisco sg300-52mp_firmwarev < 1.4.10.61.4.10.6
cisco sg500-28mpp_firmwarev < 1.4.10.61.4.10.6
cisco sg500-52mp_firmwarev < 1.4.10.61.4.10.6
cisco sg500xg-8f8t_firmwarev < 1.4.10.61.4.10.6
cisco sf500-24_firmwarev < 1.4.10.61.4.10.6
cisco sf500-24p_firmwarev < 1.4.10.61.4.10.6
cisco sf500-48_firmwarev < 1.4.10.61.4.10.6
cisco sf500-48p_firmwarev < 1.4.10.61.4.10.6
cisco sg500-28_firmwarev < 1.4.10.61.4.10.6
cisco sg500-28p_firmwarev < 1.4.10.61.4.10.6
cisco sg500-52_firmwarev < 1.4.10.61.4.10.6
cisco sg500-52p_firmwarev < 1.4.10.61.4.10.6
cisco sg500x-24_firmwarev < 1.4.10.61.4.10.6
cisco sg500x-24p_firmwarev < 1.4.10.61.4.10.6
cisco sg500x-48_firmwarev < 1.4.10.61.4.10.6
cisco sg500x-48p_firmwarev < 1.4.10.61.4.10.6
cisco sg250x-24_firmwarev < 2.5.0.782.5.0.78
cisco sg250x-24p_firmwarev < 2.5.0.782.5.0.78
cisco sg250x-48_firmwarev < 2.5.0.782.5.0.78
cisco sg250x-48p_firmwarev < 2.5.0.782.5.0.78
cisco sg250-08_firmwarev < 2.5.0.782.5.0.78
cisco sg250-08hp_firmwarev < 2.5.0.782.5.0.78
cisco sg250-10p_firmwarev < 2.5.0.782.5.0.78
cisco sg250-18_firmwarev < 2.5.0.782.5.0.78
cisco sg250-26_firmwarev < 2.5.0.782.5.0.78
cisco sg250-26hp_firmwarev < 2.5.0.782.5.0.78
cisco sg250-26p_firmwarev < 2.5.0.782.5.0.78
cisco sg250-50_firmwarev < 2.5.0.782.5.0.78
cisco sg250-50hp_firmwarev < 2.5.0.782.5.0.78
cisco sg250-50p_firmwarev < 2.5.0.782.5.0.78
cisco sf250-24_firmwarev < 2.5.0.782.5.0.78
cisco sf250-24p_firmwarev < 2.5.0.782.5.0.78
cisco sf250-48_firmwarev < 2.5.0.782.5.0.78
cisco sf250-48hp_firmwarev < 2.5.0.782.5.0.78
cisco sg350-10_firmwarev < 2.5.0.782.5.0.78
cisco sg350-10p_firmwarev < 2.5.0.782.5.0.78
cisco sg350-10mp_firmwarev < 2.5.0.782.5.0.78
cisco sg355-10p_firmwarev < 2.5.0.782.5.0.78
cisco sg350-28_firmwarev < 2.5.0.782.5.0.78
cisco sg350-28p_firmwarev < 2.5.0.782.5.0.78
cisco sg350-28mp_firmwarev < 2.5.0.782.5.0.78
cisco sf350-48_firmwarev < 2.5.0.782.5.0.78
cisco sf350-48p_firmwarev < 2.5.0.782.5.0.78
cisco sf350-48mp_firmwarev < 2.5.0.782.5.0.78
cisco sg350xg-2f10_firmwarev < 2.5.0.782.5.0.78
cisco sg350xg-24f_firmwarev < 2.5.0.782.5.0.78
cisco sg350xg-24t_firmwarev < 2.5.0.782.5.0.78
cisco sg350xg-48t_firmwarev < 2.5.0.782.5.0.78
cisco sg350x-24_firmwarev < 2.5.0.782.5.0.78
cisco sg350x-24p_firmwarev < 2.5.0.782.5.0.78
cisco sg350x-24mp_firmwarev < 2.5.0.782.5.0.78
cisco sg350x-48_firmwarev < 2.5.0.782.5.0.78
cisco sg350x-48p_firmwarev < 2.5.0.782.5.0.78
cisco sg350x-48mp_firmwarev < 2.5.0.782.5.0.78
cisco sx550x-16ft_firmwarev < 2.5.0.782.5.0.78
cisco sx550x-24ft_firmwarev < 2.5.0.782.5.0.78
cisco sx550x-12f_firmwarev < 2.5.0.782.5.0.78
cisco sx550x-24f_firmwarev < 2.5.0.782.5.0.78
cisco sx550x-24_firmwarev < 2.5.0.782.5.0.78
cisco sx550x-52_firmwarev < 2.5.0.782.5.0.78
cisco sg550x-24_firmwarev < 2.5.0.782.5.0.78
cisco sg550x-24p_firmwarev < 2.5.0.782.5.0.78
cisco sg550x-24mp_firmwarev < 2.5.0.782.5.0.78
cisco sg550x-24mpp_firmwarev < 2.5.0.782.5.0.78
cisco sg550x-48_firmwarev < 2.5.0.782.5.0.78
cisco sg550x-48p_firmwarev < 2.5.0.782.5.0.78
cisco sg550x-48mp_firmwarev < 2.5.0.782.5.0.78
cisco sf550x-24_firmwarev < 2.5.0.782.5.0.78
cisco sf550x-24p_firmwarev < 2.5.0.782.5.0.78
cisco sf550x-24mp_firmwarev < 2.5.0.782.5.0.78
cisco sf550x-48_firmwarev < 2.5.0.782.5.0.78
cisco sf550x-48p_firmwarev < 2.5.0.782.5.0.78
cisco sf550x-48mp_firmwarev < 2.5.0.782.5.0.78

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2019-1859 · Cisco Sg200-50 Firmware · Dark Radar