Cisco Small Business Series Switches CVE-2019-1891 Denial of Service Vulnerability

Bugtraq ID:	109039
Class:	Design Error
CVE:	CVE-2019-1891
Remote:	Yes
Local:	No
Published:	Jul 03 2019 12:00AM
Updated:	Jul 03 2019 12:00AM
Credit:	Cisco
Vulnerable:	Cisco Small Business 500 Series Stackable Managed Switches 1.4.9.0 Cisco Small Business 500 Series Managed Switches 1.4.2.04 Cisco Small Business 300 Series Managed Switches 1.4.7 Cisco Small Business 300 Series Managed Switches 1.4.9.0 Cisco Small Business 300 Series Managed Switches 1.4.2.04 Cisco Small Business 300 Series Managed Switches 1.4.0.88 Cisco Small Business 300 Series Managed Switch 1.4.8.06 Cisco Small Business 300 Series Managed Switch 1.2.7.76 Cisco Small Business 200 Series Managed Switches 1.4.2.04
Not Vulnerable:	Cisco Small Business 500 Series Managed Switches 1.4.10.6 Cisco Small Business 300 Series Managed Switches 1.4.10.6 Cisco Small Business 200 Series Managed Switches 1.4.10.6

Cisco Small Business Series Switches CVE-2019-1891 Denial of Service Vulnerability

Cisco Small Business Series Switches are prone to a remote denial-of-service vulnerability.

Attackers can exploit this issue to cause a reload of the affected device, denying service to legitimate users.

This issue is being tracked by Cisco Bug IDs CSCvp43403, and CSCvp43417.

Cisco Small Business Series Switches CVE-2019-1891 Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco Small Business Series Switches CVE-2019-1891 Denial of Service Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco Small Business Series Switches HTTP Denial of Service Vulnerability (Cisco)