Lucene search

[email protected]NVD:CVE-2019-1859

HistoryMay 03, 2019 - 5:29 p.m.

CVE-2019-1859

2019-05-0317:29:01

CWE-295

CWE-285

[email protected]

web.nvd.nist.gov

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

42.9%

JSON

A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an attacker to bypass client-side certificate authentication and revert to password authentication. The vulnerability exists because OpenSSH mishandles the authentication process. An attacker could exploit this vulnerability by attempting to connect to the device via SSH. A successful exploit could allow the attacker to access the configuration as an administrative user if the default credentials are not changed. There are no workarounds available; however, if client-side certificate authentication is enabled, disable it and use strong password authentication. Client-side certificate authentication is disabled by default.

Affected configurations

NVD

Node

ciscosg200-50_firmwareRange<1.4.10.6

AND

ciscosg200-50Match-

Node

ciscosg200-50p_firmwareRange<1.4.10.6

AND

ciscosg200-50pMatch-

Node

ciscosg200-50fp_firmwareRange<1.4.10.6

AND

ciscosg200-50fpMatch-

Node

ciscosg200-26_firmwareRange<1.4.10.6

AND

ciscosg200-26Match-

Node

ciscosg200-26p_firmwareRange<1.4.10.6

AND

ciscosg200-26pMatch-

Node

ciscosg200-26fp_firmwareRange<1.4.10.6

AND

ciscosg200-26fpMatch-

Node

ciscosg200-18_firmwareRange<1.4.10.6

AND

ciscosg200-18Match-

Node

ciscosg200-10fp_firmwareRange<1.4.10.6

AND

ciscosg200-10fpMatch-

Node

ciscosg200-08_firmwareRange<1.4.10.6

AND

ciscosg200-08Match-

Node

ciscosg200-08p_firmwareRange<1.4.10.6

AND

ciscosg200-08pMatch-

Node

ciscosf200-24_firmwareRange<1.4.10.6

AND

ciscosf200-24Match-

Node

ciscosf200-24p_firmwareRange<1.4.10.6

AND

ciscosf200-24pMatch-

Node

ciscosf200-24fp_firmwareRange<1.4.10.6

AND

ciscosf200-24fpMatch-

Node

ciscosf200-48_firmwareRange<1.4.10.6

AND

ciscosf200-48Match-

Node

ciscosf200-48p_firmwareRange<1.4.10.6

AND

ciscosf200-48pMatch-

Node

ciscosf302-08pp_firmwareRange<1.4.10.6

AND

ciscosf302-08ppMatch-

Node

ciscosf302-08mpp_firmwareRange<1.4.10.6

AND

ciscosf302-08mppMatch-

Node

ciscosg300-10pp_firmwareRange<1.4.10.6

AND

ciscosg300-10ppMatch-

Node

ciscosg300-10mpp_firmwareRange<1.4.10.6

AND

ciscosg300-10mppMatch-

Node

ciscosf300-24pp_firmwareRange<1.4.10.6

AND

ciscosf300-24ppMatch-

Node

ciscosf300-48pp_firmwareRange<1.4.10.6

AND

ciscosf300-48ppMatch-

Node

ciscosg300-28pp_firmwareRange<1.4.10.6

AND

ciscosg300-28ppMatch-

Node

ciscosf300-08_firmwareRange<1.4.10.6

AND

ciscosf300-08Match-

Node

ciscosf300-48p_firmwareRange<1.4.10.6

AND

ciscosf300-48pMatch-

Node

ciscosg300-10mp_firmwareRange<1.4.10.6

AND

ciscosg300-10mpMatch-

Node

ciscosg300-10p_firmwareRange<1.4.10.6

AND

ciscosg300-10pMatch-

Node

ciscosg300-10_firmwareRange<1.4.10.6

AND

ciscosg300-10Match-

Node

ciscosg300-28p_firmwareRange<1.4.10.6

AND

ciscosg300-28pMatch-

Node

ciscosf300-24p_firmwareRange<1.4.10.6

AND

ciscosf300-24pMatch-

Node

ciscosf302-08mp_firmwareRange<1.4.10.6

AND

ciscosf302-08mpMatch-

Node

ciscosg300-28_firmwareRange<1.4.10.6

AND

ciscosg300-28Match-

Node

ciscosf300-48_firmwareRange<1.4.10.6

AND

ciscosf300-48Match-

Node

ciscosg300-20_firmwareRange<1.4.10.6

AND

ciscosg300-20Match-

Node

ciscosf302-08p_firmwareRange<1.4.10.6

AND

ciscosf302-08pMatch-

Node

ciscosg300-52_firmwareRange<1.4.10.6

AND

ciscosg300-52Match-

Node

ciscosf300-24_firmwareRange<1.4.10.6

AND

ciscosf300-24Match-

Node

ciscosf302-08_firmwareRange<1.4.10.6

AND

ciscosf302-08Match-

Node

ciscosf300-24mp_firmwareRange<1.4.10.6

AND

ciscosf300-24mpMatch-

Node

ciscosg300-10sfp_firmwareRange<1.4.10.6

AND

ciscosg300-10sfpMatch-

Node

ciscosg300-28mp_firmwareRange<1.4.10.6

AND

ciscosg300-28mpMatch-

Node

ciscosg300-52p_firmwareRange<1.4.10.6

AND

ciscosg300-52pMatch-

Node

ciscosg300-52mp_firmwareRange<1.4.10.6

AND

ciscosg300-52mpMatch-

Node

ciscosg500-28mpp_firmwareRange<1.4.10.6

AND

ciscosg500-28mppMatch-

Node

ciscosg500-52mp_firmwareRange<1.4.10.6

AND

ciscosg500-52mpMatch-

Node

ciscosg500xg-8f8t_firmwareRange<1.4.10.6

AND

ciscosg500xg-8f8tMatch-

Node

ciscosf500-24_firmwareRange<1.4.10.6

AND

ciscosf500-24Match-

Node

ciscosf500-24p_firmwareRange<1.4.10.6

AND

ciscosf500-24pMatch-

Node

ciscosf500-48_firmwareRange<1.4.10.6

AND

ciscosf500-48Match-

Node

ciscosf500-48p_firmwareRange<1.4.10.6

AND

ciscosf500-48pMatch-

Node

ciscosg500-28_firmwareRange<1.4.10.6

AND

ciscosg500-28Match-

Node

ciscosg500-28p_firmwareRange<1.4.10.6

AND

ciscosg500-28pMatch-

Node

ciscosg500-52_firmwareRange<1.4.10.6

AND

ciscosg500-52Match-

Node

ciscosg500-52p_firmwareRange<1.4.10.6

AND

ciscosg500-52pMatch-

Node

ciscosg500x-24_firmwareRange<1.4.10.6

AND

ciscosg500x-24Match-

Node

ciscosg500x-24p_firmwareRange<1.4.10.6

AND

ciscosg500x-24pMatch-

Node

ciscosg500x-48_firmwareRange<1.4.10.6

AND

ciscosg500x-48Match-

Node

ciscosg500x-48p_firmwareRange<1.4.10.6

AND

ciscosg500x-48pMatch-

Node

ciscosg250x-24_firmwareRange<2.5.0.78

AND

ciscosg250x-24Match-

Node

ciscosg250x-24p_firmwareRange<2.5.0.78

AND

ciscosg250x-24pMatch-

Node

ciscosg250x-48_firmwareRange<2.5.0.78

AND

ciscosg250x-48Match-

Node

ciscosg250x-48p_firmwareRange<2.5.0.78

AND

ciscosg250x-48pMatch-

Node

ciscosg250-08_firmwareRange<2.5.0.78

AND

ciscosg250-08Match-

Node

ciscosg250-08hp_firmwareRange<2.5.0.78

AND

ciscosg250-08hpMatch-

Node

ciscosg250-10p_firmwareRange<2.5.0.78

AND

ciscosg250-10pMatch-

Node

ciscosg250-18_firmwareRange<2.5.0.78

AND

ciscosg250-18Match-

Node

ciscosg250-26_firmwareRange<2.5.0.78

AND

ciscosg250-26Match-

Node

ciscosg250-26hp_firmwareRange<2.5.0.78

AND

ciscosg250-26hpMatch-

Node

ciscosg250-26p_firmwareRange<2.5.0.78

AND

ciscosg250-26pMatch-

Node

ciscosg250-50_firmwareRange<2.5.0.78

AND

ciscosg250-50Match-

Node

ciscosg250-50hp_firmwareRange<2.5.0.78

AND

ciscosg250-50hpMatch-

Node

ciscosg250-50p_firmwareRange<2.5.0.78

AND

ciscosg250-50pMatch-

Node

ciscosf250-24_firmwareRange<2.5.0.78

AND

ciscosf250-24Match-

Node

ciscosf250-24p_firmwareRange<2.5.0.78

AND

ciscosf250-24pMatch-

Node

ciscosf250-48_firmwareRange<2.5.0.78

AND

ciscosf250-48Match-

Node

ciscosf250-48hp_firmwareRange<2.5.0.78

AND

ciscosf250-48hpMatch-

Node

ciscosg350-10_firmwareRange<2.5.0.78

AND

ciscosg350-10Match-

Node

ciscosg350-10p_firmwareRange<2.5.0.78

AND

ciscosg350-10pMatch-

Node

ciscosg350-10mp_firmwareRange<2.5.0.78

AND

ciscosg350-10mpMatch-

Node

ciscosg355-10p_firmwareRange<2.5.0.78

AND

ciscosg355-10pMatch-

Node

ciscosg350-28_firmwareRange<2.5.0.78

AND

ciscosg350-28Match-

Node

ciscosg350-28p_firmwareRange<2.5.0.78

AND

ciscosg350-28pMatch-

Node

ciscosg350-28mp_firmwareRange<2.5.0.78

AND

ciscosg350-28mpMatch-

Node

ciscosf350-48_firmwareRange<2.5.0.78

AND

ciscosf350-48Match-

Node

ciscosf350-48p_firmwareRange<2.5.0.78

AND

ciscosf350-48pMatch-

Node

ciscosf350-48mp_firmwareRange<2.5.0.78

AND

ciscosf350-48mpMatch-

Node

ciscosg350xg-2f10_firmwareRange<2.5.0.78

AND

ciscosg350xg-2f10Match-

Node

ciscosg350xg-24f_firmwareRange<2.5.0.78

AND

ciscosg350xg-24fMatch-

Node

ciscosg350xg-24t_firmwareRange<2.5.0.78

AND

ciscosg350xg-24tMatch-

Node

ciscosg350xg-48t_firmwareRange<2.5.0.78

AND

ciscosg350xg-48tMatch-

Node

ciscosg350x-24_firmwareRange<2.5.0.78

AND

ciscosg350x-24Match-

Node

ciscosg350x-24p_firmwareRange<2.5.0.78

AND

ciscosg350x-24pMatch-

Node

ciscosg350x-24mp_firmwareRange<2.5.0.78

AND

ciscosg350x-24mpMatch-

Node

ciscosg350x-48_firmwareRange<2.5.0.78

AND

ciscosg350x-48Match-

Node

ciscosg350x-48p_firmwareRange<2.5.0.78

AND

ciscosg350x-48pMatch-

Node

ciscosg350x-48mp_firmwareRange<2.5.0.78

AND

ciscosg350x-48mpMatch-

Node

ciscosx550x-16ft_firmwareRange<2.5.0.78

AND

ciscosx550x-16ftMatch-

Node

ciscosx550x-24ft_firmwareRange<2.5.0.78

AND

ciscosx550x-24ftMatch-

Node

ciscosx550x-12f_firmwareRange<2.5.0.78

AND

ciscosx550x-12fMatch-

Node

ciscosx550x-24f_firmwareRange<2.5.0.78

AND

ciscosx550x-24fMatch-

Node

ciscosx550x-24_firmwareRange<2.5.0.78

AND

ciscosx550x-24Match-

Node

ciscosx550x-52_firmwareRange<2.5.0.78

AND

ciscosx550x-52Match-

Node

ciscosg550x-24_firmwareRange<2.5.0.78

AND

ciscosg550x-24Match-

Node

ciscosg550x-24p_firmwareRange<2.5.0.78

AND

ciscosg550x-24pMatch-

Node

ciscosg550x-24mp_firmwareRange<2.5.0.78

AND

ciscosg550x-24mpMatch-

Node

ciscosg550x-24mpp_firmwareRange<2.5.0.78

AND

ciscosg550x-24mppMatch-

Node

ciscosg550x-48_firmwareRange<2.5.0.78

AND

ciscosg550x-48Match-

Node

ciscosg550x-48p_firmwareRange<2.5.0.78

AND

ciscosg550x-48pMatch-

Node

ciscosg550x-48mp_firmwareRange<2.5.0.78

AND

ciscosg550x-48mpMatch-

Node

ciscosf550x-24_firmwareRange<2.5.0.78

AND

ciscosf550x-24Match-

Node

ciscosf550x-24p_firmwareRange<2.5.0.78

AND

ciscosf550x-24pMatch-

Node

ciscosf550x-24mp_firmwareRange<2.5.0.78

AND

ciscosf550x-24mpMatch-

Node

ciscosf550x-48_firmwareRange<2.5.0.78

AND

ciscosf550x-48Match-

Node

ciscosf550x-48p_firmwareRange<2.5.0.78

AND

ciscosf550x-48pMatch-

Node

ciscosf550x-48mp_firmwareRange<2.5.0.78

AND

ciscosf550x-48mpMatch-

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-scbv

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

42.9%

JSON

Related for NVD:CVE-2019-1859

cve1 cisco1 prion1 cvelist1 threatpost1