CVE-2019-1814

A vulnerability in the interactions between the DHCP and TFTP features for Cisco Small Business 300 Series (Sx300) Managed Switches could allow an unauthenticated, remote attacker to cause the device to become low on system memory, which in turn could lead to an unexpected reload of the device and result in a denial of service (DoS) condition on an affected device. The vulnerability is due to a failure to free system memory when an unexpected DHCP request is received. An attacker could exploit this vulnerability by sending a crafted DHCP packet to the targeted device. A successful exploit could allow the attacker to cause an unexpected reload of the device.

• CWE-400
• CWE-770

• http://www.securityfocus.com/bid/108344Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-sb300sms-dhcpVendor Advisory
• http://www.securityfocus.com/bid/108344Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-sb300sms-dhcpVendor Advisory

Published

May 16, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1808A vulnerability in the Image Signature Verification feature …4.4
• CVE-2019-1809A vulnerability in the Image Signature Verification feature …6.7
• CVE-2019-1810A vulnerability in the Image Signature Verification feature …6.7
• CVE-2019-1811A vulnerability in the Image Signature Verification feature …6.7
• CVE-2019-1812A vulnerability in the Image Signature Verification feature …6.7
• CVE-2019-1813A vulnerability in the Image Signature Verification feature …6.7
• CVE-2019-1815A security vulnerability was discovered in the local status …5.3
• CVE-2019-1816A vulnerability in the log subscription subsystem of the Cis…7.8
• CVE-2019-1817A vulnerability in the web proxy functionality of Cisco Asyn…7.5
• CVE-2019-18177In certain Citrix products, information disclosure can be ac…6.5
• CVE-2019-18178Real Time Engineers FreeRTOS+FAT 160919a has a use after fre…7.5
• CVE-2019-18179An issue was discovered in Open Ticket Request System (OTRS)…4.3