Joyent SmartOS security vulnerabilities

Joyent SmartOS is an open source UNIX-like operating system from SmartOS Open Source. A security vulnerability exists in Joyent SmartOS that stems from the presence of a static host SSH key in the 60f76fd2-143f-4f57-819b-1ae32684e81b image...

CVE-2024-20350

A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability...

Cisco Catalyst Center security vulnerabilities

Cisco Catalyst Center Cisco DNA Center is a network management system from Cisco USA. A security vulnerability exists in Cisco Catalyst Center that stems from the use of a static SSH host key...

PT-2024-6439 · Cisco · Cisco Catalyst Center

Name of the Vulnerable Software and Affected Versions: Cisco Catalyst Center versions affected versions not specified Description: A vulnerability in the SSH server could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This issue is due to the presence ...

Cisco Umbrella Man-in-the-Middle

The vulnerability of the Cisco Umbrella security cloud service authentication mechanism is related to the use of a static host SSH key. Exploiting this vulnerability allows an attacker to carry out a “man-in-the-middle” attack...

Cisco Umbrella Trust Management Vulnerabilities

Cisco Umbrella is a suite of cloud security platforms from Cisco. The platform prevents cyber threats such as phishing, malware and ransomware. A security vulnerability exists in the Cisco Umbrella Virtual Appliance VA that stems from the presence of a static SSH host key. An attacker could explo...

PT-2022-2321

Name of the Vulnerable Software and Affected Versions Cisco Umbrella Virtual Appliance VA affected versions not specified Description The issue is related to the key-based SSH authentication mechanism, which uses a static SSH host key, allowing a remote attacker to perform a man-in-the-middle...

Cisco RV320/RV325 Hard-coded Certificates Privilege Escalation

The vulnerability of Cisco RV320 and Cisco RV325 router microprogramming software is related to the presence of a tightly encrypted pair of open/closed keys H.509 certificate and a static SSH host key. Exploiting this vulnerability allows an attacker operating remotely to enhance their privileges...