FKIE_CVE-2013-1154

Vulnerability from fkie_nvd - Published: 2013-03-07 20:55 - Updated: 2025-04-11 00:51
Severity ?
Summary
The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of service (SSL/TLS layer outage) via malformed (1) SSH or (2) SSL packets, aka Bug ID CSCua30246.
References
psirt@cisco.comhttp://jvn.jp/en/jp/JVN05132866/index.html
psirt@cisco.comhttp://jvndb.jvn.jp/jvndb/JVNDB-2013-000017
psirt@cisco.comhttp://tools.cisco.com/security/center/viewAlert.x?alertId=27502Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://jvn.jp/en/jp/JVN05132866/index.html
af854a3a-2127-422b-91ae-364da2661108http://jvndb.jvn.jp/jvndb/JVNDB-2013-000017
af854a3a-2127-422b-91ae-364da2661108http://tools.cisco.com/security/center/viewAlert.x?alertId=27502Vendor Advisory
Impacted products
Vendor Product Version
cisco 200_series_smart_switches_software *
cisco 200_series_smart_switches sf200-24
cisco 200_series_smart_switches sf200-24p
cisco 200_series_smart_switches sf200-48
cisco 200_series_smart_switches sf200-48p
cisco 200_series_smart_switches sg200-08
cisco 200_series_smart_switches sg200-08p
cisco 200_series_smart_switches sg200-18
cisco 200_series_smart_switches sg200-26
cisco 200_series_smart_switches sg200-26p
cisco 200_series_smart_switches sg200-50
cisco 200_series_smart_switches sg200-50p
cisco 200_series_smart_switches_software *
cisco 300_series_managed_switches sf300-08
cisco 300_series_managed_switches sf300-24
cisco 300_series_managed_switches sf300-24mp
cisco 300_series_managed_switches sf300-24p
cisco 300_series_managed_switches sf300-48
cisco 300_series_managed_switches sf300-48p
cisco 300_series_managed_switches sf302-08
cisco 300_series_managed_switches sf302-08mp
cisco 300_series_managed_switches sf302-08p
cisco 300_series_managed_switches sg300-10
cisco 300_series_managed_switches sg300-10mp
cisco 300_series_managed_switches sg300-10p
cisco 300_series_managed_switches sg300-10sfp
cisco 300_series_managed_switches sg300-20
cisco 300_series_managed_switches sg300-28
cisco 300_series_managed_switches sg300-28mp
cisco 300_series_managed_switches sg300-28p
cisco 300_series_managed_switches sg300-52
cisco 300_series_managed_switches sg300-52mp
cisco 300_series_managed_switches sg300-52p
cisco 200_series_smart_switches_software *
cisco 500_series_stackable_managed_switches sf500-24
cisco 500_series_stackable_managed_switches sf500-24p
cisco 500_series_stackable_managed_switches sf500-48
cisco 500_series_stackable_managed_switches sf500-48p
cisco 500_series_stackable_managed_switches sg500-28
cisco 500_series_stackable_managed_switches sg500-28p
cisco 500_series_stackable_managed_switches sg500-52
cisco 500_series_stackable_managed_switches sg500-52p
cisco 500_series_stackable_managed_switches sg500x-24
cisco 500_series_stackable_managed_switches sg500x-24p
cisco 500_series_stackable_managed_switches sg500x-48
cisco 500_series_stackable_managed_switches sg500x-48p
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:200_series_smart_switches_software:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6832DE21-0446-4857-827A-1139C186AFDF",
              "versionEndIncluding": "1.2.7.76",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:200_series_smart_switches:sf200-24:*:*:*:*:*:*:*",
              "matchCriteriaId": "0F49B886-FD97-4697-8982-F773E24A375F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:200_series_smart_switches:sf200-24p:*:*:*:*:*:*:*",
              "matchCriteriaId": "905BEED3-87AB-4816-A0D9-BCF58F504CDC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:200_series_smart_switches:sf200-48:*:*:*:*:*:*:*",
              "matchCriteriaId": "C937CB75-07C1-4364-9E8C-2699C8ED170A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:200_series_smart_switches:sf200-48p:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3DB4A23-B964-4973-8046-5051303DB713",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:200_series_smart_switches:sg200-08:*:*:*:*:*:*:*",
              "matchCriteriaId": "A9A5E58C-F757-46FD-9BC2-B24E1DF3152D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:200_series_smart_switches:sg200-08p:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3627765-4C90-4036-8DCA-5ACF6014DC22",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:200_series_smart_switches:sg200-18:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4E51980-8AF2-4617-AB49-292FC3758127",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:200_series_smart_switches:sg200-26:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F469F6A-9244-4949-BFBB-4151C3E1E937",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:200_series_smart_switches:sg200-26p:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7A3B291-8DB5-4078-AF76-74D216BF6581",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:200_series_smart_switches:sg200-50:*:*:*:*:*:*:*",
              "matchCriteriaId": "E47002E9-BE9A-4547-A187-BDA1375113CF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:200_series_smart_switches:sg200-50p:*:*:*:*:*:*:*",
              "matchCriteriaId": "2DD19B5E-63B3-4DC2-A5D9-AB4643A5E683",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:200_series_smart_switches_software:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6832DE21-0446-4857-827A-1139C186AFDF",
              "versionEndIncluding": "1.2.7.76",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sf300-08:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0FEA782-F658-4E4B-990A-CA5D612147AD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sf300-24:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4BC8E23-F5C2-4991-9F88-1498CD57DB62",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sf300-24mp:*:*:*:*:*:*:*",
              "matchCriteriaId": "D6C5544C-90AF-4345-B5E5-ADA978D6E332",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sf300-24p:*:*:*:*:*:*:*",
              "matchCriteriaId": "0E512706-B536-4ECF-9476-1C5F8DBE6AD0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sf300-48:*:*:*:*:*:*:*",
              "matchCriteriaId": "0890992C-7125-4D0A-9370-06D99CB540CD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sf300-48p:*:*:*:*:*:*:*",
              "matchCriteriaId": "92747BCF-D2A4-4EDA-84DB-1AF4A7BCA098",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sf302-08:*:*:*:*:*:*:*",
              "matchCriteriaId": "E2CF0328-95A5-4562-AE8C-635B4E1941C4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sf302-08mp:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB5D18DD-1598-4995-ACB8-A4B4663C5D53",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sf302-08p:*:*:*:*:*:*:*",
              "matchCriteriaId": "A67FA6CC-D806-4B45-8A66-B34F19252964",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sg300-10:*:*:*:*:*:*:*",
              "matchCriteriaId": "954DC22C-E183-4B9A-81CD-E3766A7F1242",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sg300-10mp:*:*:*:*:*:*:*",
              "matchCriteriaId": "4B539C61-1B9B-4D50-8B2E-1DF76B8F7331",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sg300-10p:*:*:*:*:*:*:*",
              "matchCriteriaId": "EA652ED4-360D-4304-8BA2-55EC06D1FC38",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sg300-10sfp:*:*:*:*:*:*:*",
              "matchCriteriaId": "D512DECA-7E05-48E6-B76B-88BF5D759176",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sg300-20:*:*:*:*:*:*:*",
              "matchCriteriaId": "F11F237E-E080-4CEE-AA95-6EBD43E41091",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sg300-28:*:*:*:*:*:*:*",
              "matchCriteriaId": "85B11601-61E4-40A0-97C0-973E45C80D60",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sg300-28mp:*:*:*:*:*:*:*",
              "matchCriteriaId": "D01B85C3-11E6-462C-BF74-C27D5A79B4AC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sg300-28p:*:*:*:*:*:*:*",
              "matchCriteriaId": "F7AC56E3-4A6E-4EE3-BCAA-F873A4D03DFE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sg300-52:*:*:*:*:*:*:*",
              "matchCriteriaId": "6AFC2A16-BEED-47B4-BC85-6B74CD7798D3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sg300-52mp:*:*:*:*:*:*:*",
              "matchCriteriaId": "5BBD26D0-9D19-4A28-9E59-AE29A1FE1848",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:300_series_managed_switches:sg300-52p:*:*:*:*:*:*:*",
              "matchCriteriaId": "ECB49808-A9B9-43E1-913F-6C9B5BF92F4F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:200_series_smart_switches_software:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6832DE21-0446-4857-827A-1139C186AFDF",
              "versionEndIncluding": "1.2.7.76",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:500_series_stackable_managed_switches:sf500-24:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC6DFBBD-FDA7-4AA2-9500-5B6B0D8E975E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:500_series_stackable_managed_switches:sf500-24p:*:*:*:*:*:*:*",
              "matchCriteriaId": "6E45235F-6665-48BE-BD80-BBE41A6E5DC9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:500_series_stackable_managed_switches:sf500-48:*:*:*:*:*:*:*",
              "matchCriteriaId": "105D0570-E8C7-4E10-B199-A08CD02A5926",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:500_series_stackable_managed_switches:sf500-48p:*:*:*:*:*:*:*",
              "matchCriteriaId": "42B7C2BC-96A3-45EF-9BDC-ECB4DA5C9817",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500-28:*:*:*:*:*:*:*",
              "matchCriteriaId": "484FEFD7-BD66-40FA-832D-5F6D5654FB63",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500-28p:*:*:*:*:*:*:*",
              "matchCriteriaId": "F2861DB4-13CF-43C1-9AE1-B2A41BB274AD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500-52:*:*:*:*:*:*:*",
              "matchCriteriaId": "A8C08301-7C5D-45F1-88CA-7C5AFAC10879",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500-52p:*:*:*:*:*:*:*",
              "matchCriteriaId": "EBC4920C-A38A-46AB-A045-7C3D58276932",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500x-24:*:*:*:*:*:*:*",
              "matchCriteriaId": "AD75A1A5-5941-4EDC-AF80-E1510EF36781",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500x-24p:*:*:*:*:*:*:*",
              "matchCriteriaId": "622D3D0E-E5B9-4E30-AE03-6C4A4B4F9605",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500x-48:*:*:*:*:*:*:*",
              "matchCriteriaId": "508BAB8D-FC5F-4B7F-9793-BF0EBCAF3602",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:cisco:500_series_stackable_managed_switches:sg500x-48p:*:*:*:*:*:*:*",
              "matchCriteriaId": "211B83FA-AE8F-4D4E-B925-1EA667EA50F5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of service (SSL/TLS layer outage) via malformed (1) SSH or (2) SSL packets, aka Bug ID CSCua30246."
    },
    {
      "lang": "es",
      "value": "El switch Cisco Small Business 200 Series Smart v1.2.7.76 y anteriores, el switch Small Business 300 Series Managed v1.2.7.76 y anteriores, y el switch Small Business 500 Series Stackable Managed v1.2.7.76 y anteriores permites a atacantes remotos causar una denegaci\u00f3n de servicios (SSL/TLS capa fuera de rango) a trav\u00e9s de malformados (1) SSH or (2) paquetes SSL, v\u00e9sae Bug ID CSCua30246."
    }
  ],
  "id": "CVE-2013-1154",
  "lastModified": "2025-04-11T00:51:21.963",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2013-03-07T20:55:02.313",
  "references": [
    {
      "source": "psirt@cisco.com",
      "url": "http://jvn.jp/en/jp/JVN05132866/index.html"
    },
    {
      "source": "psirt@cisco.com",
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000017"
    },
    {
      "source": "psirt@cisco.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=27502"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://jvn.jp/en/jp/JVN05132866/index.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000017"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://tools.cisco.com/security/center/viewAlert.x?alertId=27502"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.