5
CVSSv2

CVE-2013-1154

Published: 07/03/2013 Updated: 08/03/2013
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and previous versions, Small Business 300 Series Managed Switch 1.2.7.76 and previous versions, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and previous versions allow remote malicious users to cause a denial of service (SSL/TLS layer outage) via malformed (1) SSH or (2) SSL packets, aka Bug ID CSCua30246.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco 200_series_smart_switches sg200-50p

cisco 200_series_smart_switches sf200-24

cisco 200_series_smart_switches sg200-26

cisco 200_series_smart_switches sg200-50

cisco 200_series_smart_switches sf200-24p

cisco 200_series_smart_switches sg200-18

cisco 200_series_smart_switches sg200-26p

cisco 200_series_smart_switches sf200-48

cisco 200_series_smart_switches sf200-48p

cisco 200_series_smart_switches sg200-08

cisco 200_series_smart_switches sg200-08p

cisco 300_series_managed_switches sg300-10sfp

cisco 300_series_managed_switches sf302-08mp

cisco 300_series_managed_switches sf300-24p

cisco 300_series_managed_switches sg300-28

cisco 300_series_managed_switches sg300-52

cisco 300_series_managed_switches sf300-24mp

cisco 300_series_managed_switches sg300-28mp

cisco 300_series_managed_switches sf302-08p

cisco 300_series_managed_switches sf300-24

cisco 300_series_managed_switches sf300-48

cisco 300_series_managed_switches sg300-20

cisco 300_series_managed_switches sg300-28p

cisco 300_series_managed_switches sg300-52p

cisco 300_series_managed_switches sg300-52mp

cisco 300_series_managed_switches sf300-08

cisco 300_series_managed_switches sf302-08

cisco 300_series_managed_switches sf300-48p

cisco 300_series_managed_switches sg300-10

cisco 300_series_managed_switches sg300-10p

cisco 300_series_managed_switches sg300-10mp

cisco 200_series_smart_switches_software

cisco 500_series_stackable_managed_switches sf500-24

cisco 500_series_stackable_managed_switches sf500-48

cisco 500_series_stackable_managed_switches sg500x-24p

cisco 500_series_stackable_managed_switches sg500x-48p

cisco 500_series_stackable_managed_switches sf500-24p

cisco 500_series_stackable_managed_switches sf500-48p

cisco 500_series_stackable_managed_switches sg500x-48

cisco 500_series_stackable_managed_switches sg500-28

cisco 500_series_stackable_managed_switches sg500-28p

cisco 500_series_stackable_managed_switches sg500-52

cisco 500_series_stackable_managed_switches sg500-52p

cisco 500_series_stackable_managed_switches sg500x-24

Vendor Advisories

Cisco Small Business Switches contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition to features that rely on SSH or SSL protocols The vulnerability is due to the processing flaw in malformed packets in the code used by SSH and SSL An unauthenticated, remote attacker could exploi ...