CVE编号
CVE-2019-1892利用情况
暂无补丁情况
N/A披露时间
2019-07-06漏洞描述
Cisco 小型企业 200,300 和 500 系列托管交换机的安全套接字层 (SSL) 输入数据包处理器中存在允许未经身份验证的漏洞, 远程攻击者会导致受影响设备上的内存损坏。该漏洞是由于 HTTPS 数据包验证不当造成的。攻击者可以通过向受影响设备的管理 web 界面发送格式错误的 HTTPS 数据包来利用此漏洞。成功利用此漏洞可能会导致攻击者意外重新加载设备，从而导致拒绝服务 (DoS) 情况。<br>解决建议
厂商已发布了漏洞修复程序，请及时关注更新：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-sbss-memcorrupt
参考链接 |
|
|---|---|
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-s... |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | cisco | esw2-350g52dc_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | esw2-550x48dc_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf200-24p_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf200-24_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf200-48p_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf200-48_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf300-08_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf300-24mp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf300-24pp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf300-24p_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf300-24_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf300-48pp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf300-48p_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf300-48_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf302-08mpp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf302-08mp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf302-08pp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf302-08p_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf302-08_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf500-24mp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf500-24p_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf500-24_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf500-48mp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf500-48p_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf500-48_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg200-18_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg200-26p_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg200-26_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg200-50p_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg200-50_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-10mpp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-10mp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-10pp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-10p_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-10sfp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-10_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-20_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-28mp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-28pp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-28p_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-28sfp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-28_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-52mp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-52p_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-52_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500-28mpp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500-28p_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500-28_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500-52mp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500-52p_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500-52_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500x-24_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500x-48mp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500x-48p_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500x-48_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500x24mpp_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500xg8f8t_firmware | * |
Up to (excluding) 1.4.10.6 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | debian_10 | cyrus-imapd | * |
Up to (excluding) 3.0.8-6+deb10u3 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | debian_9 | cyrus-imapd | * |
Up to (excluding) 2.5.10-3+deb9u2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_30 | cyrus-imapd | * |
Up to (excluding) 3.0.12-1.fc30 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_31 | cyrus-imapd | * |
Up to (excluding) 3.0.12-1.fc31 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | oracle linux_8 | cyrus-imapd | * |
Up to (excluding) 3.0.7-19.el8 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | oracle_8 | oraclelinux-release | * |
Up to (excluding) 3.0.7-19.el8 |
|||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | esw2-350g52dc | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | esw2-550x48dc | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf200-24 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf200-24p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf200-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf200-48p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf300-08 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf300-24 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf300-24mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf300-24p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf300-24pp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf300-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf300-48p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf300-48pp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf302-08 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf302-08mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf302-08mpp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf302-08p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf302-08pp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf500-24 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf500-24mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf500-24p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf500-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf500-48mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf500-48p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg200-18 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg200-26 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg200-26p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg200-50 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg200-50p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-10 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-10mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-10mpp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-10p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-10pp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-10sfp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-20 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-28 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-28mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-28p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-28pp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-28sfp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-52 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-52mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-52p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500-28 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500-28mpp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500-28p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500-52 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500-52mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500-52p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500x-24 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500x-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500x-48mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500x-48p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500x24mpp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500xg8f8t | - | - | |||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 无
- 影响范围 未更改
- 用户交互 无
- 可用性 高
- 保密性 无
- 完整性 无
还没有评论，来说两句吧...