Threat Investigation
Request a demo

CVE-2019-1891

High

Description

A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper validation of requests sent to the web interface. An attacker could exploit this vulnerability by sending a malicious request to the web interface of an affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition.

SeverityHigh
CVSS7.5
Exploit probability—
ProductCisco Sf200-24 Firmware
PublishedJul 6, 2019
First seenJul 6, 2019
Weakness typeCWE-20Improper input validation

How to fix

Update
  • cisco sf200-24_firmware1.4.10.6 or later
  • cisco sf200-24p_firmware1.4.10.6 or later
  • cisco sf200-48_firmware1.4.10.6 or later
  • cisco sf200-48p_firmware1.4.10.6 or later
  • cisco sg200-18_firmware1.4.10.6 or later
  • cisco sg200-26_firmware1.4.10.6 or later
  • cisco sg200-26p_firmware1.4.10.6 or later
  • cisco sg200-50_firmware1.4.10.6 or later
  • cisco sg200-50p_firmware1.4.10.6 or later
  • cisco sg300-10_firmware1.4.10.6 or later
  • cisco sg300-10mp_firmware1.4.10.6 or later
  • cisco sg300-10mpp_firmware1.4.10.6 or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
cisco sf200-24_firmwarev < 1.4.10.61.4.10.6
cisco sf200-24p_firmwarev < 1.4.10.61.4.10.6
cisco sf200-48_firmwarev < 1.4.10.61.4.10.6
cisco sf200-48p_firmwarev < 1.4.10.61.4.10.6
cisco sg200-18_firmwarev < 1.4.10.61.4.10.6
cisco sg200-26_firmwarev < 1.4.10.61.4.10.6
cisco sg200-26p_firmwarev < 1.4.10.61.4.10.6
cisco sg200-50_firmwarev < 1.4.10.61.4.10.6
cisco sg200-50p_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10mp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10mpp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10sfp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10p_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10pp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-20_firmwarev < 1.4.10.61.4.10.6
cisco sg300-28_firmwarev < 1.4.10.61.4.10.6
cisco sg300-28p_firmwarev < 1.4.10.61.4.10.6
cisco sg300-28pp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-28mp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-28sfp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-52_firmwarev < 1.4.10.61.4.10.6
cisco sg300-52p_firmwarev < 1.4.10.61.4.10.6
cisco sg300-52mp_firmwarev < 1.4.10.61.4.10.6
cisco sf300-08_firmwarev < 1.4.10.61.4.10.6
cisco sf302-08_firmwarev < 1.4.10.61.4.10.6
cisco sf302-08mp_firmwarev < 1.4.10.61.4.10.6
cisco sf302-08p_firmwarev < 1.4.10.61.4.10.6
cisco sf302-08pp_firmwarev < 1.4.10.61.4.10.6
cisco sf302-08mpp_firmwarev < 1.4.10.61.4.10.6
cisco sf300-24_firmwarev < 1.4.10.61.4.10.6
cisco sf300-24p_firmwarev < 1.4.10.61.4.10.6
cisco sf300-24mp_firmwarev < 1.4.10.61.4.10.6
cisco sf300-24pp_firmwarev < 1.4.10.61.4.10.6
cisco sf300-48_firmwarev < 1.4.10.61.4.10.6
cisco sf300-48p_firmwarev < 1.4.10.61.4.10.6
cisco sf300-48pp_firmwarev < 1.4.10.61.4.10.6
cisco sf500-24_firmwarev < 1.4.10.61.4.10.6
cisco sf500-24p_firmwarev < 1.4.10.61.4.10.6
cisco sf500-24mp_firmwarev < 1.4.10.61.4.10.6
cisco sf500-48_firmwarev < 1.4.10.61.4.10.6
cisco sf500-48p_firmwarev < 1.4.10.61.4.10.6
cisco sf500-48mp_firmwarev < 1.4.10.61.4.10.6
cisco sg500-28_firmwarev < 1.4.10.61.4.10.6
cisco sg500-28p_firmwarev < 1.4.10.61.4.10.6
cisco sg500-28mpp_firmwarev < 1.4.10.61.4.10.6
cisco sg500-52_firmwarev < 1.4.10.61.4.10.6
cisco sg500-52p_firmwarev < 1.4.10.61.4.10.6
cisco sg500-52mp_firmwarev < 1.4.10.61.4.10.6
cisco sg500x-24_firmwarev < 1.4.10.61.4.10.6
cisco sg500x24mpp_firmwarev < 1.4.10.61.4.10.6
cisco sg500x-48_firmwarev < 1.4.10.61.4.10.6
cisco sg500x-48p_firmwarev < 1.4.10.61.4.10.6
cisco sg500x-48mp_firmwarev < 1.4.10.61.4.10.6
cisco sg500xg8f8t_firmwarev < 1.4.10.61.4.10.6
cisco esw2-350g52dc_firmwarev < 1.4.10.61.4.10.6
cisco esw2-550x48dc_firmwarev < 1.4.10.61.4.10.6

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.