CVE-2019-1892: Cisco Small Business Series Switches Memory Corruption Vulnerability
A vulnerability in the Secure Sockets Layer (SSL) input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a memory corruption on an affected device. The vulnerability is due to improper validation of HTTPS packets. An attacker could exploit this vulnerability by sending a malformed HTTPS packet to the management web interface of the affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a denial of service (DoS) condition.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1892?
CVE-2019-1892 has been rated as high severity due to the potential for an unauthenticated remote attacker to exploit the vulnerability.
How do I fix CVE-2019-1892?
To fix CVE-2019-1892, you should upgrade your Cisco Small Business Managed Switch firmware to version 1.4.10.6 or later.
Which devices are affected by CVE-2019-1892?
CVE-2019-1892 affects Cisco Small Business 200, 300, and 500 Series Managed Switches running specific firmware versions.
What type of attack can exploit CVE-2019-1892?
An unauthenticated remote attacker can exploit CVE-2019-1892 to cause memory corruption on the affected devices.
When was CVE-2019-1892 reported?
CVE-2019-1892 was reported on July 3, 2019.