CVE-2008-0535
Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (device instability) via "SSH credentials that…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (5.02%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (device instability) via "SSH credentials that attempt to change the authentication method," aka Bug ID CSCsm14239.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 5.02% probability · 92th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-255
- Affected
- cisco/service control engine · icon-labs/iconfidant ssh
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/30316Vendor Advisory
- http://secunia.com/advisories/30590Vendor Advisory
- http://securitytracker.com/id?1020074
- http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtmlPatch
- http://www.icon-labs.com/news/read.asp?newsID=77
- http://www.kb.cert.org/vuls/id/626979US Government Resource
- http://www.securityfocus.com/bid/29316
- http://www.securityfocus.com/bid/29609
- http://www.vupen.com/english/advisories/2008/1604/referencesVendor Advisory
- http://www.vupen.com/english/advisories/2008/1774/referencesVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42567
- http://secunia.com/advisories/30316Vendor Advisory
- http://secunia.com/advisories/30590Vendor Advisory
- http://securitytracker.com/id?1020074
- http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtmlPatch
- http://www.icon-labs.com/news/read.asp?newsID=77
- http://www.kb.cert.org/vuls/id/626979US Government Resource
- http://www.securityfocus.com/bid/29316
- http://www.securityfocus.com/bid/29609
- http://www.vupen.com/english/advisories/2008/1604/referencesVendor Advisory
- http://www.vupen.com/english/advisories/2008/1774/referencesVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42567
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.