CVEvulnerability

CVE-2019-1943

6.1 MEDIUM Published 2019-07-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-07-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
4.7 MEDIUM — CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 3.0 ([email protected])
6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-601

Description

A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this vulnerability by intercepting a user's HTTP request and modifying it into a request that causes the web interface to redirect the user to a specific malicious URL. This type of vulnerability is known as an open redirect attack and is used in phishing attacks that get users to unknowingly visit malicious sites.

Affected configurations

• cisco sg200-50 firmware • cisco sg200-50p firmware • cisco sg200-50fp firmware • cisco sg200-26 firmware • cisco sg200-26p firmware • cisco sg200-26fp firmware • cisco sg200-18 firmware • cisco sg200-10fp firmware • cisco sg200-08 firmware • cisco sg200-08p firmware • cisco sf200-24 firmware • cisco sf200-24p firmware • cisco sf200-24fp firmware • cisco sf200-48 firmware • cisco sf200-48p firmware • cisco sf302-08pp firmware 1.3.7.18 • cisco sf302-08mpp firmware 1.3.7.18 • cisco sg300-10pp firmware 1.3.7.18 • cisco sg300-10mpp firmware 1.3.7.18 • cisco sf300-24pp firmware 1.3.7.18 • cisco sf300-48pp firmware 1.3.7.18 • cisco sg300-28pp firmware 1.3.7.18 • cisco sf300-08 firmware 1.3.7.18 • cisco sf300-48p firmware 1.3.7.18 • cisco sg300-10mp firmware 1.3.7.18 • cisco sg300-10p firmware 1.3.7.18 • cisco sg300-10 firmware 1.3.7.18 • cisco sg300-28p firmware 1.3.7.18 • cisco sf300-24p firmware 1.3.7.18 • cisco sf302-08mp firmware 1.3.7.18 • cisco sg300-28 firmware 1.3.7.18 • cisco sf300-48 firmware 1.3.7.18 • cisco sg300-20 firmware 1.3.7.18 • cisco sf302-08p firmware 1.3.7.18 • cisco sg300-52 firmware 1.3.7.18 • cisco sf300-24 firmware 1.3.7.18 • cisco sf302-08 firmware 1.3.7.18 • cisco sf300-24mp firmware 1.3.7.18 • cisco sg300-10sfp firmware 1.3.7.18 • cisco sg300-28mp firmware 1.3.7.18 • cisco sg300-52p firmware 1.3.7.18 • cisco sg300-52mp firmware 1.3.7.18 • cisco sg500-28mpp firmware • cisco sg500-52mp firmware • cisco sg500xg-8f8t firmware • cisco sf500-24 firmware • cisco sf500-24p firmware • cisco sf500-48 firmware • cisco sf500-48p firmware • cisco sg500-28 firmware • cisco sg500-28p firmware • cisco sg500-52 firmware • cisco sg500-52p firmware • cisco sg500x-24 firmware • cisco sg500x-24p firmware • cisco sg500x-48 firmware • cisco sg500x-48p firmware

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References