Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2019-1892 Details

Description

A vulnerability in the Secure Sockets Layer (SSL) input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a memory corruption on an affected device. The vulnerability is due to improper validation of HTTPS packets. An attacker could exploit this vulnerability by sending a malformed HTTPS packet to the management web interface of the affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a denial of service (DoS) condition.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CNA: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-sbss-memcorrupt	CVE	Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-sbss-memcorrupt	[email protected]	Vendor Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	[email protected]
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer	[email protected]

Affected Products

Product	Versions
cisco sf200-24 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf200-24_firmware:::::::: Remediation No remediation found in references.
cisco sf200-24	All versions
CPE cpe:2.3:h:cisco:sf200-24:-:::::::* Remediation No remediation found in references.
cisco sf200-24p firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf200-24p_firmware:::::::: Remediation No remediation found in references.
cisco sf200-24p	All versions
CPE cpe:2.3:h:cisco:sf200-24p:-:::::::* Remediation No remediation found in references.
cisco sf200-48 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf200-48_firmware:::::::: Remediation No remediation found in references.
cisco sf200-48	All versions
CPE cpe:2.3:h:cisco:sf200-48:-:::::::* Remediation No remediation found in references.
cisco sf200-48p firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf200-48p_firmware:::::::: Remediation No remediation found in references.
cisco sf200-48p	All versions
CPE cpe:2.3:h:cisco:sf200-48p:-:::::::* Remediation No remediation found in references.
cisco sg200-18 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg200-18_firmware:::::::: Remediation No remediation found in references.
cisco sg200-18	All versions
CPE cpe:2.3:h:cisco:sg200-18:-:::::::* Remediation No remediation found in references.
cisco sg200-26 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg200-26_firmware:::::::: Remediation No remediation found in references.
cisco sg200-26	All versions
CPE cpe:2.3:h:cisco:sg200-26:-:::::::* Remediation No remediation found in references.
cisco sg200-26p firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg200-26p_firmware:::::::: Remediation No remediation found in references.
cisco sg200-26p	All versions
CPE cpe:2.3:h:cisco:sg200-26p:-:::::::* Remediation No remediation found in references.
cisco sg200-50 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg200-50_firmware:::::::: Remediation No remediation found in references.
cisco sg200-50	All versions
CPE cpe:2.3:h:cisco:sg200-50:-:::::::* Remediation No remediation found in references.
cisco sg200-50p firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg200-50p_firmware:::::::: Remediation No remediation found in references.
cisco sg200-50p	All versions
CPE cpe:2.3:h:cisco:sg200-50p:-:::::::* Remediation No remediation found in references.
cisco sg300-10 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg300-10_firmware:::::::: Remediation No remediation found in references.
cisco sg300-10	All versions
CPE cpe:2.3:h:cisco:sg300-10:-:::::::* Remediation No remediation found in references.
cisco sg300-10mp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg300-10mp_firmware:::::::: Remediation No remediation found in references.
cisco sg300-10mp	All versions
CPE cpe:2.3:h:cisco:sg300-10mp:-:::::::* Remediation No remediation found in references.
cisco sg300-10mpp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg300-10mpp_firmware:::::::: Remediation No remediation found in references.
cisco sg300-10mpp	All versions
CPE cpe:2.3:h:cisco:sg300-10mpp:-:::::::* Remediation No remediation found in references.
cisco sg300-10sfp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg300-10sfp_firmware:::::::: Remediation No remediation found in references.
cisco sg300-10sfp	All versions
CPE cpe:2.3:h:cisco:sg300-10sfp:-:::::::* Remediation No remediation found in references.
cisco sg300-10p firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg300-10p_firmware:::::::: Remediation No remediation found in references.
cisco sg300-10p	All versions
CPE cpe:2.3:h:cisco:sg300-10p:-:::::::* Remediation No remediation found in references.
cisco sg300-10pp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg300-10pp_firmware:::::::: Remediation No remediation found in references.
cisco sg300-10pp	All versions
CPE cpe:2.3:h:cisco:sg300-10pp:-:::::::* Remediation No remediation found in references.
cisco sg300-20 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg300-20_firmware:::::::: Remediation No remediation found in references.
cisco sg300-20	All versions
CPE cpe:2.3:h:cisco:sg300-20:-:::::::* Remediation No remediation found in references.
cisco sg300-28 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg300-28_firmware:::::::: Remediation No remediation found in references.
cisco sg300-28	All versions
CPE cpe:2.3:h:cisco:sg300-28:-:::::::* Remediation No remediation found in references.
cisco sg300-28p firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg300-28p_firmware:::::::: Remediation No remediation found in references.
cisco sg300-28p	All versions
CPE cpe:2.3:h:cisco:sg300-28p:-:::::::* Remediation No remediation found in references.
cisco sg300-28pp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg300-28pp_firmware:::::::: Remediation No remediation found in references.
cisco sg300-28pp	All versions
CPE cpe:2.3:h:cisco:sg300-28pp:-:::::::* Remediation No remediation found in references.
cisco sg300-28mp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg300-28mp_firmware:::::::: Remediation No remediation found in references.
cisco sg300-28mp	All versions
CPE cpe:2.3:h:cisco:sg300-28mp:-:::::::* Remediation No remediation found in references.
cisco sg300-28sfp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg300-28sfp_firmware:::::::: Remediation No remediation found in references.
cisco sg300-28sfp	All versions
CPE cpe:2.3:h:cisco:sg300-28sfp:-:::::::* Remediation No remediation found in references.
cisco sg300-52 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg300-52_firmware:::::::: Remediation No remediation found in references.
cisco sg300-52	All versions
CPE cpe:2.3:h:cisco:sg300-52:-:::::::* Remediation No remediation found in references.
cisco sg300-52p firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg300-52p_firmware:::::::: Remediation No remediation found in references.
cisco sg300-52p	All versions
CPE cpe:2.3:h:cisco:sg300-52p:-:::::::* Remediation No remediation found in references.
cisco sg300-52mp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg300-52mp_firmware:::::::: Remediation No remediation found in references.
cisco sg300-52mp	All versions
CPE cpe:2.3:h:cisco:sg300-52mp:-:::::::* Remediation No remediation found in references.
cisco sf300-08 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf300-08_firmware:::::::: Remediation No remediation found in references.
cisco sf300-08	All versions
CPE cpe:2.3:h:cisco:sf300-08:-:::::::* Remediation No remediation found in references.
cisco sf302-08 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf302-08_firmware:::::::: Remediation No remediation found in references.
cisco sf302-08	All versions
CPE cpe:2.3:h:cisco:sf302-08:-:::::::* Remediation No remediation found in references.
cisco sf302-08mp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf302-08mp_firmware:::::::: Remediation No remediation found in references.
cisco sf302-08mp	All versions
CPE cpe:2.3:h:cisco:sf302-08mp:-:::::::* Remediation No remediation found in references.
cisco sf302-08p firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf302-08p_firmware:::::::: Remediation No remediation found in references.
cisco sf302-08p	All versions
CPE cpe:2.3:h:cisco:sf302-08p:-:::::::* Remediation No remediation found in references.
cisco sf302-08pp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf302-08pp_firmware:::::::: Remediation No remediation found in references.
cisco sf302-08pp	All versions
CPE cpe:2.3:h:cisco:sf302-08pp:-:::::::* Remediation No remediation found in references.
cisco sf302-08mpp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf302-08mpp_firmware:::::::: Remediation No remediation found in references.
cisco sf302-08mpp	All versions
CPE cpe:2.3:h:cisco:sf302-08mpp:-:::::::* Remediation No remediation found in references.
cisco sf300-24 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf300-24_firmware:::::::: Remediation No remediation found in references.
cisco sf300-24	All versions
CPE cpe:2.3:h:cisco:sf300-24:-:::::::* Remediation No remediation found in references.
cisco sf300-24p firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf300-24p_firmware:::::::: Remediation No remediation found in references.
cisco sf300-24p	All versions
CPE cpe:2.3:h:cisco:sf300-24p:-:::::::* Remediation No remediation found in references.
cisco sf300-24mp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf300-24mp_firmware:::::::: Remediation No remediation found in references.
cisco sf300-24mp	All versions
CPE cpe:2.3:h:cisco:sf300-24mp:-:::::::* Remediation No remediation found in references.
cisco sf300-24pp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf300-24pp_firmware:::::::: Remediation No remediation found in references.
cisco sf300-24pp	All versions
CPE cpe:2.3:h:cisco:sf300-24pp:-:::::::* Remediation No remediation found in references.
cisco sf300-48 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf300-48_firmware:::::::: Remediation No remediation found in references.
cisco sf300-48	All versions
CPE cpe:2.3:h:cisco:sf300-48:-:::::::* Remediation No remediation found in references.
cisco sf300-48p firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf300-48p_firmware:::::::: Remediation No remediation found in references.
cisco sf300-48p	All versions
CPE cpe:2.3:h:cisco:sf300-48p:-:::::::* Remediation No remediation found in references.
cisco sf300-48pp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf300-48pp_firmware:::::::: Remediation No remediation found in references.
cisco sf300-48pp	All versions
CPE cpe:2.3:h:cisco:sf300-48pp:-:::::::* Remediation No remediation found in references.
cisco sf500-24 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf500-24_firmware:::::::: Remediation No remediation found in references.
cisco sf500-24	All versions
CPE cpe:2.3:h:cisco:sf500-24:-:::::::* Remediation No remediation found in references.
cisco sf500-24p firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf500-24p_firmware:::::::: Remediation No remediation found in references.
cisco sf500-24p	All versions
CPE cpe:2.3:h:cisco:sf500-24p:-:::::::* Remediation No remediation found in references.
cisco sf500-24mp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf500-24mp_firmware:::::::: Remediation No remediation found in references.
cisco sf500-24mp	All versions
CPE cpe:2.3:h:cisco:sf500-24mp:-:::::::* Remediation No remediation found in references.
cisco sf500-48 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf500-48_firmware:::::::: Remediation No remediation found in references.
cisco sf500-48	All versions
CPE cpe:2.3:h:cisco:sf500-48:-:::::::* Remediation No remediation found in references.
cisco sf500-48p firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf500-48p_firmware:::::::: Remediation No remediation found in references.
cisco sf500-48p	All versions
CPE cpe:2.3:h:cisco:sf500-48p:-:::::::* Remediation No remediation found in references.
cisco sf500-48mp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sf500-48mp_firmware:::::::: Remediation No remediation found in references.
cisco sf500-48mp	All versions
CPE cpe:2.3:h:cisco:sf500-48mp:-:::::::* Remediation No remediation found in references.
cisco sg500-28 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg500-28_firmware:::::::: Remediation No remediation found in references.
cisco sg500-28	All versions
CPE cpe:2.3:h:cisco:sg500-28:-:::::::* Remediation No remediation found in references.
cisco sg500-28p firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg500-28p_firmware:::::::: Remediation No remediation found in references.
cisco sg500-28p	All versions
CPE cpe:2.3:h:cisco:sg500-28p:-:::::::* Remediation No remediation found in references.
cisco sg500-28mpp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg500-28mpp_firmware:::::::: Remediation No remediation found in references.
cisco sg500-28mpp	All versions
CPE cpe:2.3:h:cisco:sg500-28mpp:-:::::::* Remediation No remediation found in references.
cisco sg500-52 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg500-52_firmware:::::::: Remediation No remediation found in references.
cisco sg500-52	All versions
CPE cpe:2.3:h:cisco:sg500-52:-:::::::* Remediation No remediation found in references.
cisco sg500-52p firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg500-52p_firmware:::::::: Remediation No remediation found in references.
cisco sg500-52p	All versions
CPE cpe:2.3:h:cisco:sg500-52p:-:::::::* Remediation No remediation found in references.
cisco sg500-52mp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg500-52mp_firmware:::::::: Remediation No remediation found in references.
cisco sg500-52mp	All versions
CPE cpe:2.3:h:cisco:sg500-52mp:-:::::::* Remediation No remediation found in references.
cisco sg500x-24 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg500x-24_firmware:::::::: Remediation No remediation found in references.
cisco sg500x-24	All versions
CPE cpe:2.3:h:cisco:sg500x-24:-:::::::* Remediation No remediation found in references.
cisco sg500x24mpp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg500x24mpp_firmware:::::::: Remediation No remediation found in references.
cisco sg500x24mpp	All versions
CPE cpe:2.3:h:cisco:sg500x24mpp:-:::::::* Remediation No remediation found in references.
cisco sg500x-48 firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg500x-48_firmware:::::::: Remediation No remediation found in references.
cisco sg500x-48	All versions
CPE cpe:2.3:h:cisco:sg500x-48:-:::::::* Remediation No remediation found in references.
cisco sg500x-48p firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg500x-48p_firmware:::::::: Remediation No remediation found in references.
cisco sg500x-48p	All versions
CPE cpe:2.3:h:cisco:sg500x-48p:-:::::::* Remediation No remediation found in references.
cisco sg500x-48mp firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg500x-48mp_firmware:::::::: Remediation No remediation found in references.
cisco sg500x-48mp	All versions
CPE cpe:2.3:h:cisco:sg500x-48mp:-:::::::* Remediation No remediation found in references.
cisco sg500xg8f8t firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:sg500xg8f8t_firmware:::::::: Remediation No remediation found in references.
cisco sg500xg8f8t	All versions
CPE cpe:2.3:h:cisco:sg500xg8f8t:-:::::::* Remediation No remediation found in references.
cisco esw2-350g52dc firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:esw2-350g52dc_firmware:::::::: Remediation No remediation found in references.
cisco esw2-350g52dc	All versions
CPE cpe:2.3:h:cisco:esw2-350g52dc:-:::::::* Remediation No remediation found in references.
cisco esw2-550x48dc firmware	< 1.4.10.6
CPE cpe:2.3:o:cisco:esw2-550x48dc_firmware:::::::: Remediation No remediation found in references.
cisco esw2-550x48dc	All versions
CPE cpe:2.3:h:cisco:esw2-550x48dc:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
Jun 17, 2026	CVE Modified	CISA-ADP
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Oct 9, 2019	CVE Modified	[email protected]
Jul 17, 2019	Initial Analysis	[email protected]

CVE-2019-1892 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation