What’s Vulnerable › Vulnerabilities
CVE-2013-1154
- Severity: medium (CVSS 5.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2013-03-07 · updated 2026-06-16
- Weakness: CWE-399
Description
The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of service (SSL/TLS layer outage) via malformed (1) SSH or (2) SSL packets, aka Bug ID CSCua30246.
Affected products
- Cisco 200 Series Smart Switches: sf200-24, sf200-24p, sf200-48, sf200-48p, sg200-08, sg200-08p (+5)
- Cisco 200 Series Smart Switches Software: through 1.2.7.76
- Cisco 300 Series Managed Switches: sf300-08, sf300-24, sf300-24mp, sf300-24p, sf300-48, sf300-48p (+14)
- Cisco 500 Series Stackable Managed Switches: sf500-24, sf500-24p, sf500-48, sf500-48p, sg500-28, sg500-28p (+6)
References
- http://jvn.jp/en/jp/JVN05132866/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000017
- http://tools.cisco.com/security/center/viewAlert.x?alertId=27502
- http://jvn.jp/en/jp/JVN05132866/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000017
- http://tools.cisco.com/security/center/viewAlert.x?alertId=27502
Get alerted when CVE-2013-1154 or the next vulnerability affects your stack