Vulnerabilities > CVE-2016-1299 - Resource Management Errors vulnerability in Cisco 300 Series Managed Switch Firmware 1.4.1

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

low complexity

cisco

CWE-399

NVD

Published: 2016-01-27

Updated: 2016-02-18

Summary

The web-management GUI implementation on Cisco Small Business SG300 devices 1.4.1.x allows remote attackers to cause a denial of service (HTTPS outage) via crafted HTTPS requests, aka Bug ID CSCuw87174.

Vulnerable Configurations

Part	Description	Count
OS	Cisco Cisco 300 Series Managed Switch Firmware 1.4.1	1
Hardware	Cisco Cisco Sf300 08 * Cisco Sf300 24 * Cisco Sf300 24Mp * Cisco Sf300 24P * Cisco Sf300 24Pp * Cisco Sf300 48 * Cisco Sf300 48P * Cisco Sf300 48Pp * Cisco Sf302 08 * Cisco Sf302 08Mp * Cisco Sf302 08Mpp * Cisco Sf302 08P * Cisco Sf302 08Pp * Cisco Sg300 10 * Cisco Sg300 10Mp * Cisco Sg300 10Mpp * Cisco Sg300 10P * Cisco Sg300 10Pp * Cisco Sg300 10Sfp * Cisco Sg300 20 * Cisco Sg300 28 * Cisco Sg300 28Mp * Cisco Sg300 28P * Cisco Sg300 28Pp * Cisco Sg300 52 * Cisco Sg300 52Mp * Cisco Sg300 52P *	27

Common Weakness Enumeration (CWE)

CWE-399 - Resource Management Errors

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-sbms