PT-2013-2922 · Cisco · Cisco Small Business 200 Series Smart Switch+2

Hisashi Kojima

+1

·

Publicado

2013-03-07

·

Atualizado

2013-03-08

·

CVE-2013-1154

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Cisco Small Business 200 Series Smart Switch versions 1.2.7.76 and earlier Cisco Small Business 300 Series Managed Switch versions 1.2.7.76 and earlier Cisco Small Business 500 Series Stackable Managed Switch versions 1.2.7.76 and earlier
Description The issue allows remote attackers to cause a denial of service at the SSL/TLS layer via malformed packets. This can be achieved through either SSH or SSL packets.
Recommendations For Cisco Small Business 200 Series Smart Switch versions 1.2.7.76 and earlier, update to a version later than 1.2.7.76 to resolve the issue. For Cisco Small Business 300 Series Managed Switch versions 1.2.7.76 and earlier, update to a version later than 1.2.7.76 to resolve the issue. For Cisco Small Business 500 Series Stackable Managed Switch versions 1.2.7.76 and earlier, update to a version later than 1.2.7.76 to resolve the issue.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2013-1154

Produtos afetados

Cisco Small Business 200 Series Smart Switch
Cisco Small Business 300 Series Managed Switch
Cisco Small Business 500 Series Stackable Managed Switch