CVE-2022-20773

CVE-2022-20773 affects Cisco Umbrella Virtual Appliance (VA) via a static SSH host key, enabling a MITM attack on SSH connections. The root cause is the presence of a static host key, which could allow an unauthenticated, remote attacker to impersonate the VA and potentially obtain administrator ...

CVE-2026-20246

Summary: CVE-2026-20246 affects Cisco Umbrella Virtual Appliance. A vulnerability in the vmadmin CLI allows an authenticated, local attacker with vmadmin privileges to escalate to root by abusing certain commands at the CLI. The root-cause is insufficient validation of user-supplied commands in v...

CVE-2022-20922

The CVE-2022-20922 entry concerns multiple vulnerabilities in the SMB2 processor of the Snort detection engine on Cisco products (Snort 3 configured). Affected component: Snort SMB2 processing; root cause: improper management of system resources while handling SMB2 traffic. Impact: unauthenticate...

CVE-2017-12350

Cisco Umbrella Insights Virtual Appliances 2.1.0 and earlier contain undocumented hardcoded default credentials. A local, authenticated attacker can use the hypervisor console to log in as root, elevating privileges on the appliance. Root access enables a range of potential follow-on compromises;...

CVE-2017-6679

The CVE-2017-6679 entry covers Cisco Umbrella Virtual Appliance versions 2.0.3 and earlier, which contained an undocumented encrypted remote support tunnel (SSH) that auto-initiated from the appliance to Cisco’s SSH Hubs. This tunnel allowed authorized Cisco Umbrella personnel to access the appli...