Vulnerability in Cisco 200 Series Smart Switches
CVE-2013-1154
The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of service (SSL/TLS layer outage) via malformed (1) SSH or (2) SSL packets, aka Bug ID CSCua30246.
EPSS: 0.016 (72.6th percentile) — read the EPSS interpretation.
Affected products
- Cisco 200_series_smart_switches — versions sf200-24, sf200-24p, sf200-48
- Cisco 200_series_smart_switches_software
- Cisco 300_series_managed_switches — versions sf300-08, sf300-24, sf300-24mp
- Cisco 500_series_stackable_managed_switches — versions sf500-24, sf500-24p, sf500-48
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_JVNDB, third-party-advisory)
- psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@cisco.com (x_refsource_JVN, third-party-advisory)