PT-2019-2645 · Cisco · Cisco Small Business 300 Series Managed Switches+2

Publicado 2019-07-03 · Atualizado 2019-10-09 · CVE-2019-1891

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Small Business 200, 300, and 500 Series Managed Switches (affected versions not specified)

Description The issue is caused by insufficient validation of input data in the web interface of the affected devices. This could allow a remote attacker to cause a denial of service (DoS) condition by sending a specially crafted request to the web interface. A successful exploit may result in an unexpected reload of the device, leading to a DoS condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2019-02531

CVE-2019-1891

Produtos afetados

Cisco Small Business 200 Series Managed Switches

Cisco Small Business 300 Series Managed Switches

Cisco Small Business 500 Series Managed Switches

Referências · 6

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-sbss-dos · Aviso do Fabricante
• https://tools.cisco.com/security/center/publicationListing.x · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-1891 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-1891 · Aviso do Fabricante
• https://t.me/cvenotify/271 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2019-02531 · Nota de Segurança