CVE-2019-1892

A vulnerability in the Secure Sockets Layer (SSL) input packet processor of Cisco Small Business 200, 300, and 500 Series Managed Switches could allow an unauthenticated, remote attacker to cause a memory corruption on an affected device. The vulnerability is due to improper validation of HTTPS packets. An attacker could exploit this vulnerability by sending a malformed HTTPS packet to the management web interface of the affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a denial of service (DoS) condition.

• CWE-119
• CWE-119

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-sbss-memcorruptVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190703-sbss-memcorruptVendor Advisory

Published

Jul 6, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18912A potential security vulnerability has been identified for c…7.8
• CVE-2019-18913A potential security vulnerability with pre-boot DMA may all…6.8
• CVE-2019-18914A potential security vulnerability has been identified for c…6.1
• CVE-2019-18915A potential security vulnerability has been identified with …7.8
• CVE-2019-18916A potential security vulnerability has been identified for H…7.8
• CVE-2019-18917A potential security vulnerability has been identified for c…6.5
• CVE-2019-18922A Directory Traversal in the Web interface of the Allied Tel…7.5
• CVE-2019-18923Insufficient content type validation of proxied resources in…6.1
• CVE-2019-18924Systematic IRIS WebForms 5.4 is vulnerable to directory trav…5.3
• CVE-2019-18925Systematic IRIS WebForms 5.4 and its functionalities can be …9.8
• CVE-2019-18926Systematic IRIS Standards Management (ISM) v2.1 SP1 89 is vu…6.1
• CVE-2019-18928Cyrus IMAP 2.5.x before 2.5.14 and 3.x before 3.0.12 allows …9.8