Networking-Forums.com

Cisco Umbrella Virtual Appliance Static SSH Host Key Vulnerability

<p>A vulnerability in the key-based SSH authentication mechanism of Cisco&nbsp;Umbrella Virtual Appliance (VA) could allow an unauthenticated, remote attacker to impersonate a VA.</p>
<p>This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability by performing a man-in-the-middle attack on an SSH connection to the Umbrella VA. A successful exploit could allow the attacker to learn the administrator credentials, change configurations, or reload the VA.</p>
<p><strong>Note</strong>: SSH is not enabled by default on the Umbrella VA.</p>
<p>Cisco&nbsp;has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.</p>
<p>This advisory is available at the following link:<br><a href="https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uva-static-key-6RQTRs4c" target="_blank">https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uva-static-key-6RQTRs4c</a></p>

     
         
Security Impact Rating:  High
   
   
       
CVE: CVE-2022-20773
Source: Cisco Umbrella Virtual Appliance Static SSH Host Key Vulnerability (https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-uva-static-key-6RQTRs4c?vs_f=Cisco%20Security%20Advisory&vs_cat=Security%20Intelligence&vs_type=RSS&vs_p=Cisco%20Umbrella%20Virtual%20Appliance%20Static%20SSH%20Host%20Key%20Vulnerability&vs_k=1)