What is CVE-2019-1806?

CVE-2019-1806 is a high-severity vulnerability in Cisco 550x Series Stackable Managed Switches, classified under Improper Input Validation. CVSS score: 7.7/10. Published 2019-05-15.

How severe is CVE-2019-1806?

High severity. CVSS v3 base score is 7.7 out of 10.

Resource exhaustion in Cisco 550x Series Stackable Managed Switches

CVE-2019-1806

A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Small Business Sx200, Sx300, Sx500, ESW2 Series Managed Switches and Small Business Sx250, Sx350, Sx550 Series Switches could allow an authent…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.021 (79.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H.

Affected products

Cisco 550x Series Stackable Managed Switches — versions unspecified, unspecified
Cisco Esw2-350g52dc
Cisco Esw2-350g52dc_firmware
Cisco Esw2-550x48dc
Cisco Esw2-550x48dc_firmware
Cisco Sf200-24
Cisco Sf200-24_firmware
Cisco Sf200-24p
Cisco Sf200-24p_firmware
Cisco Sf200-48

Weakness classification (CWE)

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2019-1806?: CVE-2019-1806 is a high-severity vulnerability in Cisco 550x Series Stackable Managed Switches, classified under Improper Input Validation. CVSS score: 7.7/10. Published 2019-05-15.
How severe is CVE-2019-1806?: High severity. CVSS v3 base score is 7.7 out of 10.