CVE-2013-1154
The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of…
Does this matter?
Lower severity and a low EPSS score (1.55%). Track it; it rarely justifies an emergency change on its own.
Description
The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of service (SSL/TLS layer outage) via malformed (1) SSH or (2) SSL packets, aka Bug ID CSCua30246.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 1.55% probability · 75th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- cisco/200 series smart switches · cisco/300 series managed switches · cisco/200 series smart switches software · cisco/500 series stackable managed switches
- Source
- psirt@cisco.com
EPSS 1.6% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- http://jvn.jp/en/jp/JVN05132866/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000017
- http://tools.cisco.com/security/center/viewAlert.x?alertId=27502Vendor Advisory
- http://jvn.jp/en/jp/JVN05132866/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000017
- http://tools.cisco.com/security/center/viewAlert.x?alertId=27502Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.