CVE-2019-1892

A vulnerability in the Secure Sockets Layer (SSL) input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a memory corruption on an affected device. The vulnerability is due to improper validation of HTTPS packets. An attacker could exploit this vulnerability by sending a malformed HTTPS packet to the management web interface of the affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a denial of service (DoS) condition.

• cisco sf200-24 firmware (< 1.4.10.6) • cisco sf200-24p firmware (< 1.4.10.6) • cisco sf200-48 firmware (< 1.4.10.6) • cisco sf200-48p firmware (< 1.4.10.6) • cisco sg200-18 firmware (< 1.4.10.6) • cisco sg200-26 firmware (< 1.4.10.6) • cisco sg200-26p firmware (< 1.4.10.6) • cisco sg200-50 firmware (< 1.4.10.6) • cisco sg200-50p firmware (< 1.4.10.6) • cisco sg300-10 firmware (< 1.4.10.6) • cisco sg300-10mp firmware (< 1.4.10.6) • cisco sg300-10mpp firmware (< 1.4.10.6) • cisco sg300-10sfp firmware (< 1.4.10.6) • cisco sg300-10p firmware (< 1.4.10.6) • cisco sg300-10pp firmware (< 1.4.10.6) • cisco sg300-20 firmware (< 1.4.10.6) • cisco sg300-28 firmware (< 1.4.10.6) • cisco sg300-28p firmware (< 1.4.10.6) • cisco sg300-28pp firmware (< 1.4.10.6) • cisco sg300-28mp firmware (< 1.4.10.6) • cisco sg300-28sfp firmware (< 1.4.10.6) • cisco sg300-52 firmware (< 1.4.10.6) • cisco sg300-52p firmware (< 1.4.10.6) • cisco sg300-52mp firmware (< 1.4.10.6) • cisco sf300-08 firmware (< 1.4.10.6) • cisco sf302-08 firmware (< 1.4.10.6) • cisco sf302-08mp firmware (< 1.4.10.6) • cisco sf302-08p firmware (< 1.4.10.6) • cisco sf302-08pp firmware (< 1.4.10.6) • cisco sf302-08mpp firmware (< 1.4.10.6) • cisco sf300-24 firmware (< 1.4.10.6) • cisco sf300-24p firmware (< 1.4.10.6) • cisco sf300-24mp firmware (< 1.4.10.6) • cisco sf300-24pp firmware (< 1.4.10.6) • cisco sf300-48 firmware (< 1.4.10.6) • cisco sf300-48p firmware (< 1.4.10.6) • cisco sf300-48pp firmware (< 1.4.10.6) • cisco sf500-24 firmware (< 1.4.10.6) • cisco sf500-24p firmware (< 1.4.10.6) • cisco sf500-24mp firmware (< 1.4.10.6) • cisco sf500-48 firmware (< 1.4.10.6) • cisco sf500-48p firmware (< 1.4.10.6) • cisco sf500-48mp firmware (< 1.4.10.6) • cisco sg500-28 firmware (< 1.4.10.6) • cisco sg500-28p firmware (< 1.4.10.6) • cisco sg500-28mpp firmware (< 1.4.10.6) • cisco sg500-52 firmware (< 1.4.10.6) • cisco sg500-52p firmware (< 1.4.10.6) • cisco sg500-52mp firmware (< 1.4.10.6) • cisco sg500x-24 firmware (< 1.4.10.6) • cisco sg500x24mpp firmware (< 1.4.10.6) • cisco sg500x-48 firmware (< 1.4.10.6) • cisco sg500x-48p firmware (< 1.4.10.6) • cisco sg500x-48mp firmware (< 1.4.10.6) • cisco sg500xg8f8t firmware (< 1.4.10.6) • cisco esw2-350g52dc firmware (< 1.4.10.6) • cisco esw2-550x48dc firmware (< 1.4.10.6)