Vulnetix
Try Vulnetix Request Demo
CVE-2022-20773 PUBLISHED CVSS 7.5 HIGH

A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance (VA) could allow an unauthenticated, remote attacker to impersonate a VA. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability by performing a man-in-the-middle attack on an SSH connection to the Umbrella VA. A successful exploit could allow the attacker to learn the administrator credentials, change configurations, or reload the VA. Note: SSH is not enabled by default on the Umbrella VA.

EPSS 0.88% · 75.2th percentile

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.88%
75.2th percentile

Affected Products

VendorProductVersions
CiscoCisco Umbrella Insights Virtual Appliancen/a
ciscoumbrella0

Timeline

References

Open in Interactive Console →