7.5 Élevée

CVE-2022-20773 A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance (VA) could allow an…

Description

A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance (VA) could allow an unauthenticated, remote attacker to impersonate a VA. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability by performing a man-in-the-middle attack on an SSH connection to the Umbrella VA. A successful exploit could allow the attacker to learn the administrator credentials, change configurations, or reload the VA. Note: SSH is not enabled by default on the Umbrella VA.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco Umbrella Insights Virtual Appliance	Versions non publiées

Références

20220420 Cisco Umbrella Virtual Appliance Static SSH Host Key Vulnerability tools.cisco.com

Chronologie

Publiée 21 avril 2022
Dernière modification 6 novembre 2024

Les 12 CVE de Cisco Umbrella Insights Virtual Appliance →

CVE-2026-20221 Multiple Cisco products are affected by a vulnerability in the generic routing encapsulation (GRE) tunnel… 5.8 Moyenne CVE-2026-20246 A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to… 6.0 Moyenne CVE-2023-20246 Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an… 5.8 Moyenne CVE-2023-20071 Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an… 5.8 Moyenne

Suivre cette CVE