cisco-sa-cps-static-key-JmS92hNv: Cisco Policy Suite Static SSH Keys Vulnerability
First published: Wed Nov 03 2021(Updated: )
A vulnerability in the key-based SSH authentication mechanism of Cisco Policy Suite could allow an unauthenticated, remote attacker to log in to an affected system as the root user. This vulnerability is due to a weakness in the SSH subsystem of an affected system. An attacker could exploit this vulnerability by connecting to an affected device through SSH. A successful exploit could allow the attacker to log in to an affected system as the root user. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cps-static-key-JmS92hNv
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Policy Suite |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-12345 associated with cisco-sa-cps-static-key-JmS92hNv?
The vulnerability described in cisco-sa-cps-static-key-JmS92hNv is considered critical due to its potential for unauthorized root access.
How do I fix cisco-sa-cps-static-key-JmS92hNv?
To mitigate the cisco-sa-cps-static-key-JmS92hNv vulnerability, users should update to the latest version of Cisco Policy Suite Software as recommended in Cisco's security advisory.
Who is affected by cisco-sa-cps-static-key-JmS92hNv?
Organizations using Cisco Policy Suite Software are at risk for the vulnerability detailed in cisco-sa-cps-static-key-JmS92hNv.
What could an attacker do with the cisco-sa-cps-static-key-JmS92hNv vulnerability?
An attacker could exploit the cisco-sa-cps-static-key-JmS92hNv vulnerability to gain unauthenticated remote access as the root user on affected systems.
When was the cisco-sa-cps-static-key-JmS92hNv vulnerability disclosed?
The cisco-sa-cps-static-key-JmS92hNv vulnerability was disclosed in July 2023.
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/weakness
- agent/severity
- agent/title
- agent/references
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco policy suite