Lucene search

[email protected]NVD:CVE-2019-1806

HistoryMay 15, 2019 - 10:29 p.m.

CVE-2019-1806

2019-05-1522:29:00

CWE-20

CWE-770

[email protected]

web.nvd.nist.gov

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

45.3%

JSON

A vulnerability in the Simple Network Management Protocol (SNMP) input packet processor of Cisco Small Business Sx200, Sx300, Sx500, ESW2 Series Managed Switches and Small Business Sx250, Sx350, Sx550 Series Switches could allow an authenticated, remote attacker to cause the SNMP application of an affected device to cease processing traffic, resulting in the CPU utilization reaching one hundred percent. Manual intervention may be required before a device resumes normal operations. The vulnerability is due to improper validation of SNMP protocol data units (PDUs) in SNMP packets. An attacker could exploit this vulnerability by sending a malicious SNMP packet to an affected device. A successful exploit could allow the attacker to cause the device to cease forwarding traffic, which could result in a denial of service (DoS) condition. Cisco has released firmware updates that address this vulnerability.

Affected configurations

NVD

Node

ciscosf200-24_firmwareRange<1.4.10.6

AND

ciscosf200-24Match-

Node

ciscosf200-24p_firmwareRange<1.4.10.6

AND

ciscosf200-24pMatch-

Node

ciscosf200-48_firmwareRange<1.4.10.6

AND

ciscosf200-48Match-

Node

ciscosf200-48p_firmwareRange<1.4.10.6

AND

ciscosf200-48pMatch-

Node

ciscosg200-18_firmwareRange<1.4.10.6

AND

ciscosg200-18Match-

Node

ciscosg200-26_firmwareRange<1.4.10.6

AND

ciscosg200-26Match-

Node

ciscosg200-26p_firmwareRange<1.4.10.6

AND

ciscosg200-26pMatch-

Node

ciscosg200-50_firmwareRange<1.4.10.6

AND

ciscosg200-50Match-

Node

ciscosg200-50p_firmwareRange<1.4.10.6

AND

ciscosg200-50pMatch-

Node

ciscosg300-10_firmwareRange<1.4.10.6

AND

ciscosg300-10Match-

Node

ciscosg300-10mp_firmwareRange<1.4.10.6

AND

ciscosg300-10mpMatch-

Node

ciscosg300-10mpp_firmwareRange<1.4.10.6

AND

ciscosg300-10mppMatch-

Node

ciscosg300-10sfp_firmwareRange<1.4.10.6

AND

ciscosg300-10sfpMatch-

Node

ciscosg300-10p_firmwareRange<1.4.10.6

AND

ciscosg300-10pMatch-

Node

ciscosg300-10pp_firmwareRange<1.4.10.6

AND

ciscosg300-10ppMatch-

Node

ciscosg300-20_firmwareRange<1.4.10.6

AND

ciscosg300-20Match-

Node

ciscosg300-28_firmwareRange<1.4.10.6

AND

ciscosg300-28Match-

Node

ciscosg300-28p_firmwareRange<1.4.10.6

AND

ciscosg300-28pMatch-

Node

ciscosg300-28pp_firmwareRange<1.4.10.6

AND

ciscosg300-28ppMatch-

Node

ciscosg300-28mp_firmwareRange<1.4.10.6

AND

ciscosg300-28mpMatch-

Node

ciscosg300-28sfp_firmwareRange<1.4.10.6

AND

ciscosg300-28sfpMatch-

Node

ciscosg300-52_firmwareRange<1.4.10.6

AND

ciscosg300-52Match-

Node

ciscosg300-52p_firmwareRange<1.4.10.6

AND

ciscosg300-52pMatch-

Node

ciscosg300-52mp_firmwareRange<1.4.10.6

AND

ciscosg300-52mpMatch-

Node

ciscosf300-08_firmwareRange<1.4.10.6

AND

ciscosf300-08Match-

Node

ciscosf302-08_firmwareRange<1.4.10.6

AND

ciscosf302-08Match-

Node

ciscosf302-08mp_firmwareRange<1.4.10.6

AND

ciscosf302-08mpMatch-

Node

ciscosf302-08p_firmwareRange<1.4.10.6

AND

ciscosf302-08pMatch-

Node

ciscosf302-08pp_firmwareRange<1.4.10.6

AND

ciscosf302-08ppMatch-

Node

ciscosf302-08mpp_firmwareRange<1.4.10.6

AND

ciscosf302-08mppMatch-

Node

ciscosf300-24_firmwareRange<1.4.10.6

AND

ciscosf300-24Match-

Node

ciscosf300-24p_firmwareRange<1.4.10.6

AND

ciscosf300-24pMatch-

Node

ciscosf300-24mp_firmwareRange<1.4.10.6

AND

ciscosf300-24mpMatch-

Node

ciscosf300-24pp_firmwareRange<1.4.10.6

AND

ciscosf300-24ppMatch-

Node

ciscosf300-48_firmwareRange<1.4.10.6

AND

ciscosf300-48Match-

Node

ciscosf300-48p_firmwareRange<1.4.10.6

AND

ciscosf300-48pMatch-

Node

ciscosf300-48pp_firmwareRange<1.4.10.6

AND

ciscosf300-48ppMatch-

Node

ciscosf500-24_firmwareRange<1.4.10.6

AND

ciscosf500-24Match-

Node

ciscosf500-24p_firmwareRange<1.4.10.6

AND

ciscosf500-24pMatch-

Node

ciscosf500-24mp_firmwareRange<1.4.10.6

AND

ciscosf500-24mpMatch-

Node

ciscosf500-48_firmwareRange<1.4.10.6

AND

ciscosf500-48Match-

Node

ciscosf500-48p_firmwareRange<1.4.10.6

AND

ciscosf500-48pMatch-

Node

ciscosf500-48mp_firmwareRange<1.4.10.6

AND

ciscosf500-48mpMatch-

Node

ciscosg500-28_firmwareRange<1.4.10.6

AND

ciscosg500-28Match-

Node

ciscosg500-28p_firmwareRange<1.4.10.6

AND

ciscosg500-28pMatch-

Node

ciscosg500-28mpp_firmwareRange<1.4.10.6

AND

ciscosg500-28mppMatch-

Node

ciscosg500-52_firmwareRange<1.4.10.6

AND

ciscosg500-52Match-

Node

ciscosg500-52p_firmwareRange<1.4.10.6

AND

ciscosg500-52pMatch-

Node

ciscosg500-52mp_firmwareRange<1.4.10.6

AND

ciscosg500-52mpMatch-

Node

ciscosg500x-24_firmwareRange<1.4.10.6

AND

ciscosg500x-24Match-

Node

ciscosg500x-24p_firmwareRange<1.4.10.6

AND

ciscosg500x-24pMatch-

Node

ciscosg500x24mpp_firmwareRange<1.4.10.6

AND

ciscosg500x24mppMatch-

Node

ciscosg500x-48_firmwareRange<1.4.10.6

AND

ciscosg500x-48Match-

Node

ciscosg500x-48p_firmwareRange<1.4.10.6

AND

ciscosg500x-48pMatch-

Node

ciscosg500x-48mp_firmwareRange<1.4.10.6

AND

ciscosg500x-48mpMatch-

Node

ciscosg500xg8f8t_firmwareRange<1.4.10.6

AND

ciscosg500xg8f8tMatch-

Node

ciscoesw2-350g52dc_firmwareRange<1.4.10.6

AND

ciscoesw2-350g52dcMatch-

Node

ciscoesw2-550x48dc_firmwareRange<1.4.10.6

AND

ciscoesw2-550x48dcMatch-

Node

ciscosg250x-24_firmwareRange<2.5.0.78

AND

ciscosg250x-24Match-

Node

ciscosg250x-24p_firmwareRange<2.5.0.78

AND

ciscosg250x-24pMatch-

Node

ciscosg250x-48_firmwareRange<2.5.0.78

AND

ciscosg250x-48Match-

Node

ciscosg250x-48p_firmwareRange<2.5.0.78

AND

ciscosg250x-48pMatch-

Node

ciscosg250-08_firmwareRange<2.5.0.78

AND

ciscosg250-08Match-

Node

ciscosg250-08hp_firmwareRange<2.5.0.78

AND

ciscosg250-08hpMatch-

Node

ciscosg250-10p_firmwareRange<2.5.0.78

AND

ciscosg250-10pMatch-

Node

ciscosg250-18_firmwareRange<2.5.0.78

AND

ciscosg250-18Match-

Node

ciscosg250-26_firmwareRange<2.5.0.78

AND

ciscosg250-26Match-

Node

ciscosg250-26hp_firmwareRange<2.5.0.78

AND

ciscosg250-26hpMatch-

Node

ciscosg250-26p_firmwareRange<2.5.0.78

AND

ciscosg250-26pMatch-

Node

ciscosg250-50_firmwareRange<2.5.0.78

AND

ciscosg250-50Match-

Node

ciscosg250-50hp_firmwareRange<2.5.0.78

AND

ciscosg250-50hpMatch-

Node

ciscosg250-50p_firmwareRange<2.5.0.78

AND

ciscosg250-50pMatch-

Node

ciscosf250-24_firmwareRange<2.5.0.78

AND

ciscosf250-24Match-

Node

ciscosf250-24p_firmwareRange<2.5.0.78

AND

ciscosf250-24pMatch-

Node

ciscosf250-48_firmwareRange<2.5.0.78

AND

ciscosf250-48Match-

Node

ciscosf250-48hp_firmwareRange<2.5.0.78

AND

ciscosf250-48hpMatch-

Node

ciscosg350-10_firmwareRange<2.5.0.78

AND

ciscosg350-10Match-

Node

ciscosg350-10p_firmwareRange<2.5.0.78

AND

ciscosg350-10pMatch-

Node

ciscosg350-10mp_firmwareRange<2.5.0.78

AND

ciscosg350-10mpMatch-

Node

ciscosg355-10p_firmwareRange<2.5.0.78

AND

ciscosg355-10pMatch-

Node

ciscosg350-28_firmwareRange<2.5.0.78

AND

ciscosg350-28Match-

Node

ciscosg350-28p_firmwareRange<2.5.0.78

AND

ciscosg350-28pMatch-

Node

ciscosg350-28mp_firmwareRange<2.5.0.78

AND

ciscosg350-28mpMatch-

Node

ciscosf350-48_firmwareRange<2.5.0.78

AND

ciscosf350-48Match-

Node

ciscosf350-48p_firmwareRange<2.5.0.78

AND

ciscosf350-48pMatch-

Node

ciscosf350-48mp_firmwareRange<2.5.0.78

AND

ciscosf350-48mpMatch-

Node

ciscosx550x-16ft_firmwareRange<2.5.0.78

AND

ciscosx550x-16ftMatch-

Node

ciscosx550x-24ft_firmwareRange<2.5.0.78

AND

ciscosx550x-24ftMatch-

Node

ciscosx550x-12f_firmwareRange<2.5.0.78

AND

ciscosx550x-12fMatch-

Node

ciscosx550x-24f_firmwareRange<2.5.0.78

AND

ciscosx550x-24fMatch-

Node

ciscosx550x-24_firmwareRange<2.5.0.78

AND

ciscosx550x-24Match-

Node

ciscosx550x-52_firmwareRange<2.5.0.78

AND

ciscosx550x-52Match-

Node

ciscosg550x-24_firmwareRange<2.5.0.78

AND

ciscosg550x-24Match-

Node

ciscosg550x-24p_firmwareRange<2.5.0.78

AND

ciscosg550x-24pMatch-

Node

ciscosg550x-24mp_firmwareRange<2.5.0.78

AND

ciscosg550x-24mpMatch-

Node

ciscosg550x-24mpp_firmwareRange<2.5.0.78

AND

ciscosg550x-24mppMatch-

Node

ciscosg550x-48_firmwareRange<2.5.0.78

AND

ciscosg550x-48Match-

Node

ciscosg550x-48p_firmwareRange<2.5.0.78

AND

ciscosg550x-48pMatch-

Node

ciscosg550x-48mp_firmwareRange<2.5.0.78

AND

ciscosg550x-48mpMatch-

Node

ciscosf550x-24_firmwareRange<2.5.0.78

AND

ciscosf550x-24Match-

Node

ciscosf550x-24p_firmwareRange<2.5.0.78

AND

ciscosf550x-24pMatch-

Node

ciscosf550x-24mp_firmwareRange<2.5.0.78

AND

ciscosf550x-24mpMatch-

Node

ciscosf550x-48_firmwareRange<2.5.0.78

AND

ciscosf550x-48Match-

Node

ciscosf550x-48p_firmwareRange<2.5.0.78

AND

ciscosf550x-48pMatch-

Node

ciscosf550x-48mp_firmwareRange<2.5.0.78

AND

ciscosf550x-48mpMatch-

References

www.securityfocus.com/bid/108335

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-sb-snmpdos

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

45.3%

JSON

Related for NVD:CVE-2019-1806

cisco1 cvelist1 prion1 cve1