Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2019-1943

CWE-601 — Open Redirect6 documents6 sources
Severity
6.1MEDIUM
EPSS
17.8%
top 4.87%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
28
Cisco Cisco Small Business 300 Series Managed SwitchesCisco Sf300-08 FirmwareCisco Sf300-24 Firmware+25 more
Timeline
PublishedJul 17
Latest updateMay 24

Description

A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this vulnerability by intercepting a user's HTTP request and modifying it into a request that causes the web interface to redirect the user to a specific malicious URL. This type of vuln…

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 1.6 | Impact: 2.7

Affected Packages28 packages

🔴Vulnerability Details

2
GHSA
GHSA-c4p7-9fgh-g95m: A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remote attacke↗2022-05-24
▶
CVEList
Cisco Small Business Series Switches Open Redirect Vulnerability↗2019-07-17
▶

💥Exploits & PoCs

2
Exploit-DB
CISCO Small Business 200 / 300 / 500 Switches - Multiple Vulnerabilities↗2019-07-15
▶
Nuclei
Cisco Small Business 200,300 and 500 Series Switches - Open Redirect
▶

📋Vendor Advisories

1
Cisco
Cisco Small Business Series Switches Open Redirect Vulnerability↗2019-07-17
▶
CVE-2019-1943 (MEDIUM CVSS 6.1) | A vulnerability in the web interfac | cvebase.io