Cisco Small Business Series Switches Open Redirect Vulnerability
Published Jul 17, 2019
6.1
MEDIUMCVSS 3.0
EPSS 9.69%
Description
A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this vulnerability by intercepting a user's HTTP request and modifying it into a request that causes the web interface to redirect the user to a specific malicious URL. This type of vulnerability is known as an open redirect attack and is used in phishing attacks that get users to unknowingly visit malicious sites.
Affected products
-
Affected
- 1.3.7.18
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
| Vendor | Product | Default status | Versions |
|---|---|---|---|
| Cisco | Cisco Small Business 300 Series Managed Switches | unknown | Affected
|
Configuration 1
- n/a
Configuration 2
- n/a
Configuration 3
- n/a
Running on/with
- n/a
Configuration 4
- n/a
Configuration 5
- n/a
Configuration 6
- n/a
Running on/with
- n/a
Configuration 7
- n/a
Configuration 8
- n/a
Running on/with
- n/a
Configuration 9
- n/a
Configuration 10
- n/a
Configuration 11
- n/a
Configuration 12
- n/a
Configuration 13
- n/a
Running on/with
- n/a
Configuration 14
- n/a
Configuration 15
- n/a
Configuration 16
- 1.3.7.18
Running on/with
- n/a
Configuration 17
- 1.3.7.18
Running on/with
- n/a
Configuration 18
- 1.3.7.18
Running on/with
- n/a
Configuration 19
- 1.3.7.18
Running on/with
- n/a
Configuration 20
- 1.3.7.18
Running on/with
- n/a
Configuration 21
- 1.3.7.18
Running on/with
- n/a
Configuration 22
- 1.3.7.18
Running on/with
- n/a
Configuration 23
- 1.3.7.18
Configuration 24
- 1.3.7.18
Configuration 25
- 1.3.7.18
Running on/with
- n/a
Configuration 26
- 1.3.7.18
Configuration 27
- 1.3.7.18
Configuration 28
- 1.3.7.18
Configuration 29
- 1.3.7.18
Configuration 30
- 1.3.7.18
Running on/with
- n/a
Configuration 31
- 1.3.7.18
Configuration 32
- 1.3.7.18
Configuration 33
- 1.3.7.18
Configuration 34
- 1.3.7.18
Configuration 35
- 1.3.7.18
Configuration 36
- 1.3.7.18
Configuration 37
- 1.3.7.18
Configuration 38
- 1.3.7.18
Running on/with
- n/a
Configuration 39
- 1.3.7.18
Running on/with
- n/a
Configuration 40
- 1.3.7.18
Running on/with
- n/a
Configuration 41
- 1.3.7.18
Configuration 42
- 1.3.7.18
Running on/with
- n/a
Configuration 43
- n/a
Running on/with
- n/a
Configuration 44
- n/a
Running on/with
- n/a
Configuration 45
- n/a
Running on/with
- n/a
Configuration 46
- n/a
Configuration 47
- n/a
Configuration 48
- n/a
Configuration 49
- n/a
Configuration 50
- n/a
Configuration 51
- n/a
Configuration 52
- n/a
Configuration 53
- n/a
Configuration 54
- n/a
Configuration 55
- n/a
Running on/with
- n/a
Configuration 56
- n/a
Configuration 57
- n/a
Running on/with
- n/a
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (3)
- http://www.securityfocus.com/bid/109288 vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-10500 Advisory
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-sbss-redirect vendor-advisoryx_refsource_CISCOVendor Advisory
| Link | Providers | Tags |
|---|---|---|
| http://www.securityfocus.com/bid/109288 | vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-10500 | Advisory | |
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-sbss-redirect | vendor-advisoryx_refsource_CISCOVendor Advisory |
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
Red Hat
No data
GitHub
No data