SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2005-1020

Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload) (1) via a username that contains a domain name when using a TACACS+ server to authenticate, (2) when a new SSH session is in the…

HIGH 7.1EPSS 1.73%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.73%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Secure Shell (SSH) 2 in Cisco IOS 12.0 through 12.3 allows remote attackers to cause a denial of service (device reload) (1) via a username that contains a domain name when using a TACACS+ server to authenticate, (2) when a new SSH session is in the login phase and a currently logged in user issues a send command, or (3) when IOS is logging messages and an SSH session is terminated while the server is sending data.

CVSS 2.0
7.1 HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C
EPSS
1.73% probability · 76th percentile
CISA KEV
Not listed
Weakness
CWE-287
Affected
cisco/ios
Source
cve@mitre.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.