JVNDB-2013-000017

Multiple Cisco products vulnerable to denial-of-service (DoS)

The SSH implementation in multiple Cisco products contains a denial-of-service (DoS) vulnerability.

Hisashi Kojima, Masahiro Nakada of Fujitsu Laboratories Ltd. reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Cisco Systems, Inc.

• Cisco Small Business 200 Series Smart Switch software 1.2.7.76 and prior
• Cisco Small Business 200 Series Smart Switch (1.2.7.76 and prior)
• Cisco Small Business 300 Series Managed Switch (1.2.7.76 and prior)
• Cisco Small Business 500 Series Stackable Managed Switch (1.2.7.76 and prior)

A wide range of products are affected.

For more information, refer to the advisory provided by the developer.

A remote attacker may be able to cause a denial-of-service (DoS).

[Apply an update]
Update to the latest version according to the information provided by the developer.

Cisco Systems, Inc.

• Cisco : Cisco Small Business Switches SSH Packet Processing Denial of Service Vulnerability

1. No Mapping(CWE-noinfo) [IPA Evaluation]

1. CVE-2013-1154

1. JVN : JVN#05132866
2. National Vulnerability Database (NVD) : CVE-2013-1154
3. IPA SECURITY ALERTS : Security Alert for Vulnerability in Multiple Cisco Products (Japanese Only)

• [2013/03/07]
    Web page was published
  [2013/03/11]
    Affected Products : Contents was updated