CVE-2024-20350
published 2024-09-25CVE-2024-20350: A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco…
high8.1CVSS 3.1
AVNACHPRNUINSUCHIHAH
A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance.
This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections, which could allow the attacker to intercept traffic between SSH clients and a Cisco Catalyst Center appliance. A successful exploit could allow the attacker to impersonate the affected appliance, inject commands into the terminal session, and steal valid user credentials.
Affected
169 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |
| cisco | catalyst_center | — | — |