CVE-2019-1943

A vulnerability in the web interface of Cisco Small Business 200, 300, and 500 Series Switches software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. The vulnerability is due to improper input validation of the parameters of an HTTP request. An attacker could exploit this vulnerability by intercepting a user's HTTP request and modifying it into a request that causes the web interface to redirect the user to a specific malicious URL. This type of vulnerability is known as an open redirect attack and is used in phishing attacks that get users to unknowingly visit malicious sites.

• CWE-601
• CWE-601

• http://www.securityfocus.com/bid/109288Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-sbss-redirectVendor Advisory
• http://www.securityfocus.com/bid/109288Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190717-sbss-redirectVendor Advisory

Published

Jul 17, 2019

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19413There is an integer overflow vulnerability in LDAP client of…7.5
• CVE-2019-19414There is an integer overflow vulnerability in LDAP server of…7.5
• CVE-2019-19415The SIP module of some Huawei products have a denial of serv…7.5
• CVE-2019-19416The SIP module of some Huawei products have a denial of serv…7.5
• CVE-2019-19417The SIP module of some Huawei products have a denial of serv…7.5
• CVE-2019-1942A vulnerability in the sponsor portal web interface for Cisc…4.3
• CVE-2019-1944Multiple vulnerabilities in the smart tunnel functionality o…7.3
• CVE-2019-19441HUAWEI P30 smart phones with versions earlier than 10.0.0.16…6.5
• CVE-2019-19447In the Linux kernel 5.0.21, mounting a crafted ext4 filesyst…7.8
• CVE-2019-19448In the Linux kernel 5.0.21 and 5.3.11, mounting a crafted bt…7.8
• CVE-2019-19449In the Linux kernel 5.0.21, mounting a crafted f2fs filesyst…7.8
• CVE-2019-1945Multiple vulnerabilities in the smart tunnel functionality o…6.7