CVE-2019-1913

CVE-2019-1913 describes multiple critical vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches. These flaws, stemming from insufficient input validation and improper boundary checks, allow an unauthenticated, remote attacker to trigger a buffer overflow. Successful exploitation can lead to arbitrary code execution with root privileges on the affected device. The vulnerability carries a CVSS score of 9.8 (Critical), indicating a high-impact threat with a network-based attack vector and low attack complexity. An attacker can achieve complete compromise of confidentiality, integrity, and availability. While not listed on the CISA KEV catalog, public exploit code (EDB-47442) is available, and the vulnerability has garnered significant community attention and media coverage, including articles from BleepingComputer and SecurityWeek.