PT-2017-17272 · Cisco · Cisco Small Business Managed Switches

Published 2017-09-21 · Updated 2020-09-04 · CVE-2017-6720

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco Small Business Managed Switches software (affected versions not specified)

Description A vulnerability in the Secure Shell (SSH) subsystem could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service (DoS) condition. The issue is due to improper processing of SSH connections. An attacker could exploit this by logging in to an affected switch via SSH and sending a malicious SSH message.

Recommendations For all affected versions, disable SSH until a fix is available to prevent exploitation. As a temporary workaround, consider restricting access to the SSH subsystem to minimize the risk of denial of service attacks.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-6720

Affected Products

Cisco Small Business Managed Switches

References · 4

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-sbms · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-6720 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6720 · Security Note
• http://securityfocus.com/bid/100933 · Note