A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of SSH connections. An attacker could exploit this vulnerability by logging in to an affected switch via SSH and sending a malicious SSH message. This vulnerability affects the following Cisco products when SSH is enabled: Small Business 300 Series Managed Switches, Small Business 500 Series Stackable Managed Switches, 350 Series Managed Switches, 350X Series Stackable Managed Switches, 550X Series Stackable Managed Switches, ESW2 Series Advanced Switches. Cisco Bug IDs: CSCvb48377.

Project Subscriptions

Vendors Products
Esw2-350g-52 Subscribe
Esw2-350g-52 Firmware Subscribe
Esw2-350g-52dc Subscribe
Esw2-350g-52dc Firmware Subscribe
Esw2-550x-48 Subscribe
Esw2-550x-48 Firmware Subscribe
Esw2-550x-48dc Subscribe
Esw2-550x-48dc Firmware Subscribe
Sf300-08 Subscribe
Sf300-08 Firmware Subscribe
Sf300-24 Subscribe
Sf300-24 Firmware Subscribe
Sf300-24mp Subscribe
Sf300-24mp Firmware Subscribe
Sf300-24p Subscribe
Sf300-24p Firmware Subscribe
Sf300-24pp Subscribe
Sf300-24pp Firmware Subscribe
Sf300-48 Subscribe
Sf300-48 Firmware Subscribe
Sf300-48p Subscribe
Sf300-48p Firmware Subscribe
Sf300-48pp Subscribe
Sf300-48pp Firmware Subscribe
Sf302-08 Subscribe
Sf302-08 Firmware Subscribe
Sf302-08mp Subscribe
Sf302-08mp Firmware Subscribe
Sf302-08mpp Subscribe
Sf302-08mpp Firmware Subscribe
Sf302-08p Subscribe
Sf302-08p Firmware Subscribe
Sf302-08pp Subscribe
Sf302-08pp Firmware Subscribe
Sf350-48 Subscribe
Sf350-48 Firmware Subscribe
Sf350-48mp Subscribe
Sf350-48mp Firmware Subscribe
Sf350-48p Subscribe
Sf350-48p Firmware Subscribe
Sf500-24 Subscribe
Sf500-24 Firmware Subscribe
Sf500-24p Subscribe
Sf500-24p Firmware Subscribe
Sf500-48 Subscribe
Sf500-48 Firmware Subscribe
Sf500-48p Subscribe
Sf500-48p Firmware Subscribe
Sf550x-24 Subscribe
Sf550x-24 Firmware Subscribe
Sf550x-24mp Subscribe
Sf550x-24mp Firmware Subscribe
Sf550x-24p Subscribe
Sf550x-24p Firmware Subscribe
Sf550x-48 Subscribe
Sf550x-48 Firmware Subscribe
Sf550x-48mp Subscribe
Sf550x-48mp Firmware Subscribe
Sf550x-48p Subscribe
Sf550x-48p Firmware Subscribe
Sg300-10 Subscribe
Sg300-10 Firmware Subscribe
Sg300-10mp Subscribe
Sg300-10mp Firmware Subscribe
Sg300-10mpp Subscribe
Sg300-10mpp Firmware Subscribe
Sg300-10p Subscribe
Sg300-10p Firmware Subscribe
Sg300-10pp Subscribe
Sg300-10pp Firmware Subscribe
Sg300-10sfp Subscribe
Sg300-10sfp Firmware Subscribe
Sg300-20 Subscribe
Sg300-20 Firmware Subscribe
Sg300-28 Subscribe
Sg300-28 Firmware Subscribe
Sg300-28mp Subscribe
Sg300-28mp Firmware Subscribe
Sg300-28p Subscribe
Sg300-28p Firmware Subscribe
Sg300-28pp Subscribe
Sg300-28pp Firmware Subscribe
Sg300-52 Subscribe
Sg300-52 Firmware Subscribe
Sg300-52mp Subscribe
Sg300-52mp Firmware Subscribe
Sg300-52p Subscribe
Sg300-52p Firmware Subscribe
Sg350-10 Subscribe
Sg350-10 Firmware Subscribe
Sg350-10mp Subscribe
Sg350-10mp Firmware Subscribe
Sg350-10p Subscribe
Sg350-10p Firmware Subscribe
Sg350-28 Subscribe
Sg350-28 Firmware Subscribe
Sg350-28mp Subscribe
Sg350-28mp Firmware Subscribe
Sg350-28p Subscribe
Sg350-28p Firmware Subscribe
Sg350x-24 Subscribe
Sg350x-24 Firmware Subscribe
Sg350x-24mp Subscribe
Sg350x-24mp Firmware Subscribe
Sg350x-24p Subscribe
Sg350x-24p Firmware Subscribe
Sg350x-48 Subscribe
Sg350x-48 Firmware Subscribe
Sg350x-48mp Subscribe
Sg350x-48mp Firmware Subscribe
Sg350x-48p Subscribe
Sg350x-48p Firmware Subscribe
Sg350xg-24f Subscribe
Sg350xg-24f Firmware Subscribe
Sg350xg-24t Subscribe
Sg350xg-24t Firmware Subscribe
Sg350xg-2f10 Subscribe
Sg350xg-2f10 Firmware Subscribe
Sg350xg-48t Subscribe
Sg350xg-48t Firmware Subscribe
Sg355-10p Subscribe
Sg355-10p Firmware Subscribe
Sg500-28 Subscribe
Sg500-28 Firmware Subscribe
Sg500-28mpp Subscribe
Sg500-28mpp Firmware Subscribe
Sg500-28p Subscribe
Sg500-28p Firmware Subscribe
Sg500-52 Subscribe
Sg500-52 Firmware Subscribe
Sg500-52mp Subscribe
Sg500-52mp Firmware Subscribe
Sg500-52p Subscribe
Sg500-52p Firmware Subscribe
Sg500x-24 Subscribe
Sg500x-24 Firmware Subscribe
Sg500x-24p Subscribe
Sg500x-24p Firmware Subscribe
Sg500x-48 Subscribe
Sg500x-48 Firmware Subscribe
Sg500x-48p Subscribe
Sg500x-48p Firmware Subscribe
Sg500xg-8f8t Subscribe
Sg500xg-8f8t Firmware Subscribe
Sg550x-24 Subscribe
Sg550x-24 Firmware Subscribe
Sg550x-24mp Subscribe
Sg550x-24mp Firmware Subscribe
Sg550x-24mpp Subscribe
Sg550x-24mpp Firmware Subscribe
Sg550x-24p Subscribe
Sg550x-24p Firmware Subscribe
Sg550x-48 Subscribe
Sg550x-48 Firmware Subscribe
Sg550x-48mp Subscribe
Sg550x-48mp Firmware Subscribe
Sg550x-48p Subscribe
Sg550x-48p Firmware Subscribe
Sx550x-12f Subscribe
Sx550x-12f Firmware Subscribe
Sx550x-16ft Subscribe
Sx550x-16ft Firmware Subscribe
Sx550x-24 Subscribe
Sx550x-24 Firmware Subscribe
Sx550x-24f Subscribe
Sx550x-24f Firmware Subscribe
Sx550x-24ft Subscribe
Sx550x-24ft Firmware Subscribe
Sx550x-52 Subscribe
Sx550x-52 Firmware Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2017-15774 A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of SSH connections. An attacker could exploit this vulnerability by logging in to an affected switch via SSH and sending a malicious SSH message. This vulnerability affects the following Cisco products when SSH is enabled: Small Business 300 Series Managed Switches, Small Business 500 Series Stackable Managed Switches, 350 Series Managed Switches, 350X Series Stackable Managed Switches, 550X Series Stackable Managed Switches, ESW2 Series Advanced Switches. Cisco Bug IDs: CSCvb48377.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: cisco

Published:

Updated: 2024-08-05T15:41:16.614Z

Reserved: 2017-03-09T00:00:00.000Z

Link: CVE-2017-6720

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2017-09-21T05:29:01.043

Modified: 2025-04-20T01:37:25.860

Link: CVE-2017-6720

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses