A vulnerability in the Secure Shell (SSH) authentication process of Cisco Small Business Switches software could allow an malicious user to bypass client-side certificate authentication and revert to password authentication. The vulnerability exists because OpenSSH mishandles the authentication process. An attacker could exploit this vulnerability by attempting to connect to the device via SSH. A successful exploit could allow the malicious user to access the configuration as an administrative user if the default credentials are not changed. There are no workarounds available; however, if client-side certificate authentication is enabled, disable it and use strong password authentication. Client-side certificate authentication is disabled by default.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cisco sg200-50_firmware |
||
cisco sg200-50p_firmware |
||
cisco sg200-50fp_firmware |
||
cisco sg200-26_firmware |
||
cisco sg200-26p_firmware |
||
cisco sg200-26fp_firmware |
||
cisco sg200-18_firmware |
||
cisco sg200-10fp_firmware |
||
cisco sg200-08_firmware |
||
cisco sg200-08p_firmware |
||
cisco sf200-24_firmware |
||
cisco sf200-24p_firmware |
||
cisco sf200-24fp_firmware |
||
cisco sf200-48_firmware |
||
cisco sf200-48p_firmware |
||
cisco sf302-08pp_firmware |
||
cisco sf302-08mpp_firmware |
||
cisco sg300-10pp_firmware |
||
cisco sg300-10mpp_firmware |
||
cisco sf300-24pp_firmware |
||
cisco sf300-48pp_firmware |
||
cisco sg300-28pp_firmware |
||
cisco sf300-08_firmware |
||
cisco sf300-48p_firmware |
||
cisco sg300-10mp_firmware |
||
cisco sg300-10p_firmware |
||
cisco sg300-10_firmware |
||
cisco sg300-28p_firmware |
||
cisco sf300-24p_firmware |
||
cisco sf302-08mp_firmware |
||
cisco sg300-28_firmware |
||
cisco sf300-48_firmware |
||
cisco sg300-20_firmware |
||
cisco sf302-08p_firmware |
||
cisco sg300-52_firmware |
||
cisco sf300-24_firmware |
||
cisco sf302-08_firmware |
||
cisco sf300-24mp_firmware |
||
cisco sg300-10sfp_firmware |
||
cisco sg300-28mp_firmware |
||
cisco sg300-52p_firmware |
||
cisco sg300-52mp_firmware |
||
cisco sg500-28mpp_firmware |
||
cisco sg500-52mp_firmware |
||
cisco sg500xg-8f8t_firmware |
||
cisco sf500-24_firmware |
||
cisco sf500-24p_firmware |
||
cisco sf500-48_firmware |
||
cisco sf500-48p_firmware |
||
cisco sg500-28_firmware |
||
cisco sg500-28p_firmware |
||
cisco sg500-52_firmware |
||
cisco sg500-52p_firmware |
||
cisco sg500x-24_firmware |
||
cisco sg500x-24p_firmware |
||
cisco sg500x-48_firmware |
||
cisco sg500x-48p_firmware |
||
cisco sg250x-24_firmware |
||
cisco sg250x-24p_firmware |
||
cisco sg250x-48_firmware |
||
cisco sg250x-48p_firmware |
||
cisco sg250-08_firmware |
||
cisco sg250-08hp_firmware |
||
cisco sg250-10p_firmware |
||
cisco sg250-18_firmware |
||
cisco sg250-26_firmware |
||
cisco sg250-26hp_firmware |
||
cisco sg250-26p_firmware |
||
cisco sg250-50_firmware |
||
cisco sg250-50hp_firmware |
||
cisco sg250-50p_firmware |
||
cisco sf250-24_firmware |
||
cisco sf250-24p_firmware |
||
cisco sf250-48_firmware |
||
cisco sf250-48hp_firmware |
||
cisco sg350-10_firmware |
||
cisco sg350-10p_firmware |
||
cisco sg350-10mp_firmware |
||
cisco sg355-10p_firmware |
||
cisco sg350-28_firmware |
||
cisco sg350-28p_firmware |
||
cisco sg350-28mp_firmware |
||
cisco sf350-48_firmware |
||
cisco sf350-48p_firmware |
||
cisco sf350-48mp_firmware |
||
cisco sg350xg-2f10_firmware |
||
cisco sg350xg-24f_firmware |
||
cisco sg350xg-24t_firmware |
||
cisco sg350xg-48t_firmware |
||
cisco sg350x-24_firmware |
||
cisco sg350x-24p_firmware |
||
cisco sg350x-24mp_firmware |
||
cisco sg350x-48_firmware |
||
cisco sg350x-48p_firmware |
||
cisco sg350x-48mp_firmware |
||
cisco sx550x-16ft_firmware |
||
cisco sx550x-24ft_firmware |
||
cisco sx550x-12f_firmware |
||
cisco sx550x-24f_firmware |
||
cisco sx550x-24_firmware |
||
cisco sx550x-52_firmware |
||
cisco sg550x-24_firmware |
||
cisco sg550x-24p_firmware |
||
cisco sg550x-24mp_firmware |
||
cisco sg550x-24mpp_firmware |
||
cisco sg550x-48_firmware |
||
cisco sg550x-48p_firmware |
||
cisco sg550x-48mp_firmware |
||
cisco sf550x-24_firmware |
||
cisco sf550x-24p_firmware |
||
cisco sf550x-24mp_firmware |
||
cisco sf550x-48_firmware |
||
cisco sf550x-48p_firmware |
||
cisco sf550x-48mp_firmware |
Vulmon