Hardcoded SSH Key in Cisco Policy Suite Lets Remote Hackers Gain Root Access

Cisco Systems has released security updates to address vulnerabilities in multiple Cisco products that could be exploited by an attacker to log in as a root user and take control of vulnerable systems. Tracked as CVE-2021-40119, the vulnerability has been rated 9.8 in severity out of a maximum of...

CVE-2021-40119 Cisco Policy Suite Static SSH Keys Vulnerability

A vulnerability in the key-based SSH authentication mechanism of Cisco Policy Suite could allow an unauthenticated, remote attacker to log in to an affected system as the root user. This vulnerability is due to the re-use of static SSH keys across installations. An attacker could exploit this...

CVE-2021-40119

CVE-2021-40119 affects Cisco Policy Suite. The root cause is reuse of static SSH keys across installations, enabling an unauthenticated attacker to log in as root via SSH to vulnerable devices. Cisco issued advisories and software updates; starting with Policy Suite releases 21.2.0 and later, dev...