Unsuspecting SSH Attacks on Cisco Catalyst Center

CVE-2024-20350

Summary

A vulnerability exists in the SSH server of Cisco Catalyst Center that enables an unauthenticated remote attacker to impersonate the appliance. This issue arises from a static SSH host key, which makes it susceptible to machine-in-the-middle attacks. Attackers exploiting this vulnerability can intercept and manipulate traffic between SSH clients and the Cisco Catalyst Center. Consequently, they could impersonate the device, inject unauthorized commands into terminal sessions, and potentially compromise valid user credentials.

References