Threat Investigation
Request a demo

CVE-2019-1892

High

Description

A vulnerability in the Secure Sockets Layer (SSL) input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a memory corruption on an affected device. The vulnerability is due to improper validation of HTTPS packets. An attacker could exploit this vulnerability by sending a malformed HTTPS packet to the management web interface of the affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a denial of service (DoS) condition.

SeverityHigh
CVSS7.5
Exploit probability—
ProductCisco Sf200-24 Firmware
PublishedJul 6, 2019
First seenJul 6, 2019
Weakness typeCWE-119Memory buffer bounds error

How to fix

Update
  • cisco sf200-24_firmware1.4.10.6 or later
  • cisco sf200-24p_firmware1.4.10.6 or later
  • cisco sf200-48_firmware1.4.10.6 or later
  • cisco sf200-48p_firmware1.4.10.6 or later
  • cisco sg200-18_firmware1.4.10.6 or later
  • cisco sg200-26_firmware1.4.10.6 or later
  • cisco sg200-26p_firmware1.4.10.6 or later
  • cisco sg200-50_firmware1.4.10.6 or later
  • cisco sg200-50p_firmware1.4.10.6 or later
  • cisco sg300-10_firmware1.4.10.6 or later
  • cisco sg300-10mp_firmware1.4.10.6 or later
  • cisco sg300-10mpp_firmware1.4.10.6 or later
Vendor advisories

Affected products

ProductAffected versionsFixed in
cisco sf200-24_firmwarev < 1.4.10.61.4.10.6
cisco sf200-24p_firmwarev < 1.4.10.61.4.10.6
cisco sf200-48_firmwarev < 1.4.10.61.4.10.6
cisco sf200-48p_firmwarev < 1.4.10.61.4.10.6
cisco sg200-18_firmwarev < 1.4.10.61.4.10.6
cisco sg200-26_firmwarev < 1.4.10.61.4.10.6
cisco sg200-26p_firmwarev < 1.4.10.61.4.10.6
cisco sg200-50_firmwarev < 1.4.10.61.4.10.6
cisco sg200-50p_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10mp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10mpp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10sfp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10p_firmwarev < 1.4.10.61.4.10.6
cisco sg300-10pp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-20_firmwarev < 1.4.10.61.4.10.6
cisco sg300-28_firmwarev < 1.4.10.61.4.10.6
cisco sg300-28p_firmwarev < 1.4.10.61.4.10.6
cisco sg300-28pp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-28mp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-28sfp_firmwarev < 1.4.10.61.4.10.6
cisco sg300-52_firmwarev < 1.4.10.61.4.10.6
cisco sg300-52p_firmwarev < 1.4.10.61.4.10.6
cisco sg300-52mp_firmwarev < 1.4.10.61.4.10.6
cisco sf300-08_firmwarev < 1.4.10.61.4.10.6
cisco sf302-08_firmwarev < 1.4.10.61.4.10.6
cisco sf302-08mp_firmwarev < 1.4.10.61.4.10.6
cisco sf302-08p_firmwarev < 1.4.10.61.4.10.6
cisco sf302-08pp_firmwarev < 1.4.10.61.4.10.6
cisco sf302-08mpp_firmwarev < 1.4.10.61.4.10.6
cisco sf300-24_firmwarev < 1.4.10.61.4.10.6
cisco sf300-24p_firmwarev < 1.4.10.61.4.10.6
cisco sf300-24mp_firmwarev < 1.4.10.61.4.10.6
cisco sf300-24pp_firmwarev < 1.4.10.61.4.10.6
cisco sf300-48_firmwarev < 1.4.10.61.4.10.6
cisco sf300-48p_firmwarev < 1.4.10.61.4.10.6
cisco sf300-48pp_firmwarev < 1.4.10.61.4.10.6
cisco sf500-24_firmwarev < 1.4.10.61.4.10.6
cisco sf500-24p_firmwarev < 1.4.10.61.4.10.6
cisco sf500-24mp_firmwarev < 1.4.10.61.4.10.6
cisco sf500-48_firmwarev < 1.4.10.61.4.10.6
cisco sf500-48p_firmwarev < 1.4.10.61.4.10.6
cisco sf500-48mp_firmwarev < 1.4.10.61.4.10.6
cisco sg500-28_firmwarev < 1.4.10.61.4.10.6
cisco sg500-28p_firmwarev < 1.4.10.61.4.10.6
cisco sg500-28mpp_firmwarev < 1.4.10.61.4.10.6
cisco sg500-52_firmwarev < 1.4.10.61.4.10.6
cisco sg500-52p_firmwarev < 1.4.10.61.4.10.6
cisco sg500-52mp_firmwarev < 1.4.10.61.4.10.6
cisco sg500x-24_firmwarev < 1.4.10.61.4.10.6
cisco sg500x24mpp_firmwarev < 1.4.10.61.4.10.6
cisco sg500x-48_firmwarev < 1.4.10.61.4.10.6
cisco sg500x-48p_firmwarev < 1.4.10.61.4.10.6
cisco sg500x-48mp_firmwarev < 1.4.10.61.4.10.6
cisco sg500xg8f8t_firmwarev < 1.4.10.61.4.10.6
cisco esw2-350g52dc_firmwarev < 1.4.10.61.4.10.6
cisco esw2-550x48dc_firmwarev < 1.4.10.61.4.10.6

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.