CVE-2019-1806

CVE-2019-1806 is a denial-of-service vulnerability affecting Cisco Small Business Sx200, Sx300, Sx500, ESW2, Sx250, Sx350, and Sx550 Series Switches. It stems from improper validation of SNMP protocol data units, allowing an authenticated, remote attacker to send a malicious SNMP packet. This can cause the SNMP application to cease processing traffic, leading to 100% CPU utilization and a denial-of-service condition requiring manual intervention. With a CVSS score of 7.7 (High), the attack vector is network-based with low attack complexity, and the primary impact is high availability loss. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.