A vulnerability in the Secure Sockets Layer (SSL) input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a memory corruption on an affected device. The vulnerability is due to improper validation of HTTPS packets. An attacker could exploit this vulnerability by sending a malformed HTTPS packet to the management web interface of the affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a denial of service (DoS) condition.
History

No history.

cve-icon MITRE Information

Status: PUBLISHED

Assigner: cisco

Published: 2019-07-03T00:00:00

Updated: 2019-07-06T01:15:12

Reserved: 2018-12-06T00:00:00


Link: CVE-2019-1892

JSON object: View

cve-icon NVD Information

Status : Modified

Published: 2019-07-06T02:15:11.293

Modified: 2019-10-09T23:48:27.910


Link: CVE-2019-1892

JSON object: View

cve-icon Redhat Information

No data.

CWE