CVE-2013-1154
The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of…
Does this matter?
Lower severity and a low EPSS score (1.55%). Track it; it rarely justifies an emergency change on its own.
Description
The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of service (SSL/TLS layer outage) via malformed (1) SSH or (2) SSL packets, aka Bug ID CSCua30246.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 1.55% probability · 74th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- cisco/200 series smart switches · cisco/300 series managed switches · cisco/200 series smart switches software · cisco/500 series stackable managed switches
- Source
- psirt@cisco.com
References
- http://jvn.jp/en/jp/JVN05132866/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000017
- http://tools.cisco.com/security/center/viewAlert.x?alertId=27502Vendor Advisory
- http://jvn.jp/en/jp/JVN05132866/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000017
- http://tools.cisco.com/security/center/viewAlert.x?alertId=27502Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.