CVE-2013-1154: Cisco 200 Series Smart Switches

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

The Cisco Small Business 200 Series Smart Switch 1.2.7.76 and earlier, Small Business 300 Series Managed Switch 1.2.7.76 and earlier, and Small Business 500 Series Stackable Managed Switch 1.2.7.76 and earlier allow remote attackers to cause a denial of service (SSL/TLS layer outage) via malformed (1) SSH or (2) SSL packets, aka Bug ID CSCua30246.

Affected products

• Cisco 200 Series Smart Switches
• Cisco 200 Series Smart Switches Software: up to and including 1.2.7.76
• Cisco 300 Series Managed Switches
• Cisco 500 Series Stackable Managed Switches

Published 2013-03-07. Last modified 2026-06-16.