High severity · published May 15, 2019
CVE-2019-1806
A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Small Business Sx200, Sx300, Sx500, ESW2 Series Managed Switches and Small…
7.7
CVSS
2%
EPSS
No
On KEV
Description
A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Small Business Sx200, Sx300, Sx500, ESW2 Series Managed Switches and Small Business Sx250, Sx350, Sx550 Series Switches could allow an authenticated, remote attacker to cause the SNMP application of an affected device to cease processing traffic, resulting in the CPU utilization reaching one hundred percent. Manual intervention may be required before a device resumes normal operations. The vulnerability is due to improper validation of SNMP protocol data units (PDUs) in SNMP packets. An attacker could exploit this vulnerability by sending a malicious SNMP packet to an affected device. A successful exploit could allow the attacker to cause the device to cease forwarding traffic, which could result in a denial of service (DoS) condition. Cisco has released firmware updates that address this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EF
Esw2-350g52dc Firmware · Cisco
before 1.4.10.6 · source: NVD
EF
Esw2-550x48dc Firmware · Cisco
before 1.4.10.6 · source: NVD
SF
Sf200-24 Firmware · Cisco
before 1.4.10.6 · source: NVD
SF
Sf200-24p Firmware · Cisco
before 1.4.10.6 · source: NVD
SF
Sf200-48 Firmware · Cisco
before 1.4.10.6 · source: NVD
SF
Sf200-48p Firmware · Cisco
before 1.4.10.6 · source: NVD
SF
Sf300-08 Firmware · Cisco
before 1.4.10.6 · source: NVD
SF
Sf300-24 Firmware · Cisco
before 1.4.10.6 · source: NVD
SF
Sf300-24mp Firmware · Cisco
before 1.4.10.6 · source: NVD
SF
Sf300-24p Firmware · Cisco
before 1.4.10.6 · source: NVD
SF
Sf300-24pp Firmware · Cisco
before 1.4.10.6 · source: NVD
SF
Sf300-48 Firmware · Cisco
before 1.4.10.6 · source: NVD
Affected product
EF
Esw2-350g52dc Firmware
Cisco
More from Esw2-350g52dc Firmware
7.5
CVE-2019-1892
A vulnerability in the Secure Sockets Layer (SSL) input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote…
7.5
CVE-2019-1891
A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service…