1. Home
  2. CVE Database
  3. CVE-2017-6720
MEDIUM · 6.5

CVE-2017-6720

A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting ...

Vulnerability Description

A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of SSH connections. An attacker could exploit this vulnerability by logging in to an affected switch via SSH and sending a malicious SSH message. This vulnerability affects the following Cisco products when SSH is enabled: Small Business 300 Series Managed Switches, Small Business 500 Series Stackable Managed Switches, 350 Series Managed Switches, 350X Series Stackable Managed Switches, 550X Series Stackable Managed Switches, ESW2 Series Advanced Switches. Cisco Bug IDs: CSCvb48377.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
CiscoSf302-08Pp Firmware< 1.4.8.06
CiscoSf302-08Pp-
CiscoSf302-08Mpp Firmware< 1.4.8.06
CiscoSf302-08Mpp-
CiscoSg300-10Pp Firmware< 1.4.8.06
CiscoSg300-10Pp-
CiscoSg300-10Mpp Firmware< 1.4.8.06
CiscoSg300-10Mpp-
CiscoSf300-24Pp Firmware< 1.4.8.06
CiscoSf300-24Pp-
CiscoSf300-48Pp Firmware< 1.4.8.06
CiscoSf300-48Pp-
CiscoSg300-28Pp Firmware< 1.4.8.06
CiscoSg300-28Pp-
CiscoSf300-08 Firmware< 1.4.8.06
CiscoSf300-08-
CiscoSf300-48P Firmware< 1.4.8.06
CiscoSf300-48P-
CiscoSg300-10Mp Firmware< 1.4.8.06
CiscoSg300-10Mp-

Related Weaknesses (CWE)

CWE-119

References

FAQ

What is CVE-2017-6720?

CVE-2017-6720 is a vulnerability with a CVSS score of 6.5 (MEDIUM). A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting ...

How severe is CVE-2017-6720?

CVE-2017-6720 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-6720?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Sf302-08Pp Firmware, Cisco Sf302-08Pp, Cisco Sf302-08Mpp Firmware, Cisco Sf302-08Mpp, Cisco Sg300-10Pp Firmware.