CVE-2008-0536
Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (management interface…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.32%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (management interface outage) via SSH traffic that occurs during management operations and triggers "illegal I/O operations," aka Bug ID CSCsh49563.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 4.32% probability · 91th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- cisco/service control engine · icon-labs/iconfidant ssh
- Source
- psirt@cisco.com
References
- http://secunia.com/advisories/30316Vendor Advisory
- http://secunia.com/advisories/30590Vendor Advisory
- http://securitytracker.com/id?1020074
- http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtmlPatch
- http://www.icon-labs.com/news/read.asp?newsID=77
- http://www.kb.cert.org/vuls/id/626979US Government Resource
- http://www.securityfocus.com/bid/29316
- http://www.securityfocus.com/bid/29609
- http://www.vupen.com/english/advisories/2008/1604/referencesVendor Advisory
- http://www.vupen.com/english/advisories/2008/1774/referencesVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42566
- http://secunia.com/advisories/30316Vendor Advisory
- http://secunia.com/advisories/30590Vendor Advisory
- http://securitytracker.com/id?1020074
- http://www.cisco.com/en/US/products/products_security_advisory09186a008099bf65.shtmlPatch
- http://www.icon-labs.com/news/read.asp?newsID=77
- http://www.kb.cert.org/vuls/id/626979US Government Resource
- http://www.securityfocus.com/bid/29316
- http://www.securityfocus.com/bid/29609
- http://www.vupen.com/english/advisories/2008/1604/referencesVendor Advisory
- http://www.vupen.com/english/advisories/2008/1774/referencesVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42566
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.