CiscoCISCO-SA-20170920-SBMSCisco Small Business Managed Switches Denial of Service Vulnerability
EPSS
Percentile
43.8%
A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service (DoS) condition.
The vulnerability is due to improper processing of SSH connections. An attacker could exploit this vulnerability by logging in to an affected switch via SSH and sending a malicious SSH message.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-sbms [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-sbms”]
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | 300_series_managed_switches | any | cpe:2.3:h:cisco:300_series_managed_switches:any:*:*:*:*:*:*:* |
| cisco | small_business_500_series_stackable_managed_switches_firmware | any | cpe:2.3:o:cisco:small_business_500_series_stackable_managed_switches_firmware:any:*:*:*:*:*:*:* |
| cisco | 500_series_stackable_managed_switches | any | cpe:2.3:h:cisco:500_series_stackable_managed_switches:any:*:*:*:*:*:*:* |
| cisco | cisco_550x_series_stackable_managed_switches | any | cpe:2.3:a:cisco:cisco_550x_series_stackable_managed_switches:any:*:*:*:*:*:*:* |
| cisco | 200_series_smart_switches | any | cpe:2.3:h:cisco:200_series_smart_switches:any:*:*:*:*:*:*:* |
| cisco | small_business_srp541w | 300_series_managed_switches | cpe:2.3:h:cisco:small_business_srp541w:300_series_managed_switches:*:*:*:*:*:*:* |
| cisco | small_business_srp541w | 500_series_stackable_managed_switches | cpe:2.3:h:cisco:small_business_srp541w:500_series_stackable_managed_switches:*:*:*:*:*:*:* |
| cisco | cisco | 350_series_managed_switches | cpe:2.3:a:cisco:cisco:350_series_managed_switches:*:*:*:*:*:*:* |
| cisco | cisco | 350x_series_stackable_managed_switches | cpe:2.3:a:cisco:cisco:350x_series_stackable_managed_switches:*:*:*:*:*:*:* |
| cisco | cisco | 550x_series_stackable_managed_switches | cpe:2.3:a:cisco:cisco:550x_series_stackable_managed_switches:*:*:*:*:*:*:* |
Related
