7.5
High
CVE-2022-20773 A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance (VA) could allow an…
Description
A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance (VA) could allow an unauthenticated, remote attacker to impersonate a VA. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability by performing a man-in-the-middle attack on an SSH connection to the Umbrella VA. A successful exploit could allow the attacker to learn the administrator credentials, change configurations, or reload the VA. Note: SSH is not enabled by default on the Umbrella VA.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Umbrella Insights Virtual Appliance | Versions not published |
Other CVEs of Cisco Umbrella Insights Virtual Appliance
The 12 CVEs of Cisco Umbrella Insights Virtual Appliance →
CVE-2026-20221
Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel…
5.8
Medium
CVE-2026-20246
A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to…
6.0
Medium
CVE-2023-20246
Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an…
5.8
Medium
CVE-2023-20071
Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an…
5.8
Medium