CVE-2013-1154: Medium severity cisco small business 200, 300, and 500 series switches vulnerability
The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of service (SSL/TLS layer outage) via malformed (1) SSH or (2) SSL packets, aka Bug ID CSCua30246.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1154?
The severity of CVE-2013-1154 is rated as medium because it allows remote denial of service attacks.
How do I fix CVE-2013-1154?
To fix CVE-2013-1154, upgrade the Cisco Small Business 200, 300, or 500 Series Switches to the latest firmware version beyond 1.2.7.76.
What vulnerabilities does CVE-2013-1154 exploit?
CVE-2013-1154 exploits the SSL/TLS layer, leading to potential outages and service disruption.
Which Cisco products are affected by CVE-2013-1154?
CVE-2013-1154 affects Cisco Small Business 200, 300, and 500 Series Switches running version 1.2.7.76 or earlier.
Can CVE-2013-1154 be mitigated without a firmware update?
Mitigation of CVE-2013-1154 without a firmware update is not possible; updating the firmware is essential for protection.