PT-2017-17272 · Cisco · Cisco Small Business Managed Switches

Publicado 2017-09-21 · Atualizado 2020-09-04 · CVE-2017-6720

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Small Business Managed Switches software (affected versions not specified)

Description A vulnerability in the Secure Shell (SSH) subsystem could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service (DoS) condition. The issue is due to improper processing of SSH connections. An attacker could exploit this by logging in to an affected switch via SSH and sending a malicious SSH message.

Recommendations For all affected versions, disable SSH until a fix is available to prevent exploitation. As a temporary workaround, consider restricting access to the SSH subsystem to minimize the risk of denial of service attacks.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2017-6720

Produtos afetados

Cisco Small Business Managed Switches

Referências · 4

• http://securityfocus.com/bid/100933 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-sbms · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-6720 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6720 · Nota de Segurança