CVE-2024-20350

Cisco Catalyst Center Static SSH Host Key Vulnerability

Published Sep 25, 2024 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Description

A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance.

This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections, which could allow the attacker to intercept traffic between SSH clients and a Cisco Catalyst Center appliance. A successful exploit could allow the attacker to impersonate the affected appliance, inject commands into the terminal session, and steal valid user credentials.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Cisco

Cisco Digital Network Architecture Center (DNA Center)

unknown

Version	Status	Constraints
`1.4.0.0`	affected	—
`2.1.1.0`	affected	—
`2.1.1.3`	affected	—
`2.1.2.0`	affected	—
`2.1.2.3`	affected	—
`2.1.2.4`	affected	—
`2.1.2.5`	affected	—
`2.2.1.0`	affected	—
`2.1.2.6`	affected	—
`2.2.2.0`	affected	—
`2.2.2.1`	affected	—
`2.2.2.3`	affected	—
`2.1.2.7`	affected	—
`2.2.1.3`	affected	—
`2.2.3.0`	affected	—
`2.2.2.4`	affected	—
`2.2.2.5`	affected	—
`2.2.3.3`	affected	—
`2.2.2.7`	affected	—
`2.2.2.6`	affected	—
`2.2.2.8`	affected	—
`2.2.3.4`	affected	—
`2.1.2.8`	affected	—
`2.3.2.1`	affected	—
`2.3.2.1-AIRGAP`	affected	—
`2.3.2.1-AIRGAP-CA`	affected	—
`2.2.3.5`	affected	—
`2.3.3.0`	affected	—
`2.3.3.3`	affected	—
`2.3.3.1-AIRGAP`	affected	—
`2.3.3.1`	affected	—
`2.3.2.3`	affected	—
`2.3.3.3-AIRGAP`	affected	—
`2.2.3.6`	affected	—
`2.2.2.9`	affected	—
`2.3.3.0-AIRGAP`	affected	—
`2.3.3.3-AIRGAP-CA`	affected	—
`2.3.3.4`	affected	—
`2.3.3.4-AIRGAP`	affected	—
`2.3.3.4-AIRGAP-MDNAC`	affected	—
`2.3.3.4-HF1`	affected	—
`2.3.4.0`	affected	—
`2.3.3.5`	affected	—
`2.3.3.5-AIRGAP`	affected	—
`2.3.4.0-AIRGAP`	affected	—
`2.3.4.3`	affected	—
`2.3.4.3-AIRGAP`	affected	—
`2.3.3.6`	affected	—
`2.3.5.0`	affected	—
`2.3.3.6-AIRGAP`	affected	—
`2.3.5.0-AIRGAP`	affected	—
`2.3.3.6-AIRGAP-MDNAC`	affected	—
`2.3.5.0-AIRGAP-MDNAC`	affected	—
`2.3.3.7`	affected	—
`2.3.3.7-AIRGAP`	affected	—
`2.3.3.7-AIRGAP-MDNAC`	affected	—
`2.3.6.0`	affected	—
`2.3.3.6-70045-HF1`	affected	—
`2.3.3.7-72328-AIRGAP`	affected	—
`2.3.3.7-72323`	affected	—
`2.3.3.7-72328-MDNAC`	affected	—
`2.3.5.3`	affected	—
`2.3.5.3-AIRGAP-MDNAC`	affected	—
`2.3.5.3-AIRGAP`	affected	—
`2.3.6.0-AIRGAP`	affected	—
`2.3.7.0`	affected	—
`2.3.7.0-AIRGAP`	affected	—
`2.3.7.0-AIRGAP-MDNAC`	affected	—
`2.3.7.0-VA`	affected	—
`2.3.5.4`	affected	—
`2.3.5.4-AIRGAP`	affected	—
`2.3.5.4-AIRGAP-MDNAC`	affected	—
`2.3.7.3`	affected	—
`2.3.7.3-AIRGAP`	affected	—
`2.3.7.3-AIRGAP-MDNAC`	affected	—
`2.3.5.5-AIRGAP`	affected	—
`2.3.5.5`	affected	—
`2.3.5.5-AIRGAP-MDNAC`	affected	—
`2.3.7.4`	affected	—
`2.3.7.4-AIRGAP`	affected	—
`2.3.7.4-AIRGAP-MDNAC`	affected	—
`1.0.0.0`	affected	—
`2.3.5.5-70026-HF70`	affected	—
`2.3.5.5-70026-HF51`	affected	—
`2.3.5.5-70026-HF52`	affected	—
`2.3.5.5-70026-HF53`	affected	—

Configuration 1 [-]

OR	cpe:2.3:a:cisco:catalyst_center:1.0.0:::::::*
	cpe:2.3:a:cisco:catalyst_center:1.4.0.0:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.1.1.0:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.1.1.3:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.1.2.0:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.1.2.3:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.1.2.4:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.1.2.5:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.1.2.6:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.1.2.7:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.1.2.8:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.2.1.0:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.2.1.3:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.2.2.0:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.2.2.1:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.2.2.3:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.2.2.4:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.2.2.5:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.2.2.6:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.2.2.7:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.2.2.8:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.2.2.9:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.2.3.0:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.2.3.3:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.2.3.4:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.2.3.5:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.2.3.6:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.2.1:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.2.1-airgap:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.2.1-airgap-ca:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.2.3:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.0:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.0-airgap:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.1:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.1-airgap:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.3:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.3-airgap:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.3-airgap-ca:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.4:-::::::
	cpe:2.3:a:cisco:catalyst_center:2.3.3.4:hotfix1::::::
	cpe:2.3:a:cisco:catalyst_center:2.3.3.4-airgap:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.4-airgap-mdnac:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.5:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.5-airgap:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.6:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.6-70045:hotfix1::::::
	cpe:2.3:a:cisco:catalyst_center:2.3.3.6-airgap:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.6-airgap-mdnac:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.7:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.7-72323:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.7-72328-airgap:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.7-72328-mdnac:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.7-airgap:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.3.7-airgap-mdnac:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.4.0:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.4.0-airgap:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.4.3:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.4.3-airgap:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.5.0:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.5.0-airgap:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.5.0-airgap-mdnac:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.5.3:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.5.3-airgap:::::::*
	cpe:2.3:a:cisco:catalyst_center:2.3.5.3-airgap-mdnac:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.5.4:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.5.4-airgap:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.5.4-airgap-mdnac:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.5.5:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.5.5-70026:hotfix51::::::
cpe:2.3:a:cisco:catalyst_center:2.3.5.5-70026:hotfix52::::::
cpe:2.3:a:cisco:catalyst_center:2.3.5.5-70026:hotfix53::::::
cpe:2.3:a:cisco:catalyst_center:2.3.5.5-70026:hotfix70::::::
cpe:2.3:a:cisco:catalyst_center:2.3.5.5-airgap:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.5.5-airgap-mdnac:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.6.0:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.6.0-airgap:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.7.0:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.7.0-airgap:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.7.0-airgap-mdnac:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.7.0-va:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.7.3:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.7.3-airgap:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.7.3-airgap-mdnac:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.7.4:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.7.4-airgap:::::::*
cpe:2.3:a:cisco:catalyst_center:2.3.7.4-airgap-mdnac:::::::*

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
EUVD	EUVD-2024-18065	A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections, which could allow the attacker to intercept traffic between SSH clients and a Cisco Catalyst Center appliance. A successful exploit could allow the attacker to impersonate the affected appliance, inject commands into the terminal session, and steal valid user credentials.

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.419% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-ssh-e4uOdASj

History

Jul 30, 2025 4:15 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Cisco catalyst Center
CPEs		cpe:2.3:a:cisco:catalyst_center:1.0.0:::::::* cpe:2.3:a:cisco:catalyst_center:1.4.0.0:::::::* cpe:2.3:a:cisco:catalyst_center:2.1.1.0:::::::* cpe:2.3:a:cisco:catalyst_center:2.1.1.3:::::::* cpe:2.3:a:cisco:catalyst_center:2.1.2.0:::::::* cpe:2.3:a:cisco:catalyst_center:2.1.2.3:::::::* cpe:2.3:a:cisco:catalyst_center:2.1.2.4:::::::* cpe:2.3:a:cisco:catalyst_center:2.1.2.5:::::::* cpe:2.3:a:cisco:catalyst_center:2.1.2.6:::::::* cpe:2.3:a:cisco:catalyst_center:2.1.2.7:::::::* cpe:2.3:a:cisco:catalyst_center:2.1.2.8:::::::* cpe:2.3:a:cisco:catalyst_center:2.2.1.0:::::::* cpe:2.3:a:cisco:catalyst_center:2.2.1.3:::::::* cpe:2.3:a:cisco:catalyst_center:2.2.2.0:::::::* cpe:2.3:a:cisco:catalyst_center:2.2.2.1:::::::* cpe:2.3:a:cisco:catalyst_center:2.2.2.3:::::::* cpe:2.3:a:cisco:catalyst_center:2.2.2.4:::::::* cpe:2.3:a:cisco:catalyst_center:2.2.2.5:::::::* cpe:2.3:a:cisco:catalyst_center:2.2.2.6:::::::* cpe:2.3:a:cisco:catalyst_center:2.2.2.7:::::::* cpe:2.3:a:cisco:catalyst_center:2.2.2.8:::::::* cpe:2.3:a:cisco:catalyst_center:2.2.2.9:::::::* cpe:2.3:a:cisco:catalyst_center:2.2.3.0:::::::* cpe:2.3:a:cisco:catalyst_center:2.2.3.3:::::::* cpe:2.3:a:cisco:catalyst_center:2.2.3.4:::::::* cpe:2.3:a:cisco:catalyst_center:2.2.3.5:::::::* cpe:2.3:a:cisco:catalyst_center:2.2.3.6:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.2.1-airgap-ca:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.2.1-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.2.1:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.2.3:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.0-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.0:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.1-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.1:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.3-airgap-ca:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.3-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.3:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.4-airgap-mdnac:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.4-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.4:-:::::: cpe:2.3:a:cisco:catalyst_center:2.3.3.4:hotfix1:::::: cpe:2.3:a:cisco:catalyst_center:2.3.3.5-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.5:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.6-70045:hotfix1:::::: cpe:2.3:a:cisco:catalyst_center:2.3.3.6-airgap-mdnac:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.6-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.6:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.7-72323:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.7-72328-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.7-72328-mdnac:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.7-airgap-mdnac:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.7-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.3.7:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.4.0-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.4.0:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.4.3-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.4.3:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.5.0-airgap-mdnac:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.5.0-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.5.0:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.5.3-airgap-mdnac:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.5.3-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.5.3:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.5.4-airgap-mdnac:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.5.4-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.5.4:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.5.5-70026:hotfix51:::::: cpe:2.3:a:cisco:catalyst_center:2.3.5.5-70026:hotfix52:::::: cpe:2.3:a:cisco:catalyst_center:2.3.5.5-70026:hotfix53:::::: cpe:2.3:a:cisco:catalyst_center:2.3.5.5-70026:hotfix70:::::: cpe:2.3:a:cisco:catalyst_center:2.3.5.5-airgap-mdnac:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.5.5-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.5.5:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.6.0-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.6.0:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.7.0-airgap-mdnac:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.7.0-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.7.0-va:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.7.0:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.7.3-airgap-mdnac:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.7.3-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.7.3:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.7.4-airgap-mdnac:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.7.4-airgap:::::::* cpe:2.3:a:cisco:catalyst_center:2.3.7.4:::::::*
Vendors & Products		Cisco catalyst Center

Sep 25, 2024 8:30 PM First appearance in the feed. Affected versions updated. Affected vendors updated. Scoring metrics updated View changes

Type	Values Removed	Values Added
First Time appeared		Cisco Cisco digital Network Architecture Center
CPEs		cpe:2.3:o:cisco:digital_network_architecture_center:1.0.0.0:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:1.4.0.0:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.1.1.0:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.1.1.3:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.1.2.0:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.1.2.3:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.1.2.4:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.1.2.5:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.1.2.6:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.1.2.7:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.1.2.8:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.2.1.0:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.2.1.3:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.2.2.0:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.2.2.1:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.2.2.3:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.2.2.4:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.2.2.5:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.2.2.6:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.2.2.7:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.2.2.8:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.2.2.9:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.2.3.0:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.2.3.3:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.2.3.4:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.2.3.5:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.2.3.6:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.2.1-airgap-ca:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.2.1-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.2.1:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.2.3:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.0-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.0:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.1-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.1:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.3-airgap-ca:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.3-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.3:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.4-airgap-mdnac:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.4-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.4-hf1:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.4:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.5-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.5:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.6-70045-hf1:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.6-airgap-mdnac:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.6-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.6:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.7-72323:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.7-72328-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.7-72328-mdnac:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.7-airgap-mdnac:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.7-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.3.7:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.4.0-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.4.0:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.4.3-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.4.3:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.5.0-airgap-mdnac:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.5.0-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.5.0:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.5.3-airgap-mdnac:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.5.3-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.5.3:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.5.4-airgap-mdnac:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.5.4-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.5.4:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.5.5-70026-hf51:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.5.5-70026-hf52:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.5.5-70026-hf53:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.5.5-70026-hf70:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.5.5-airgap-mdnac:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.5.5-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.5.5:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.6.0-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.6.0:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.7.0-airgap-mdnac:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.7.0-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.7.0-va:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.7.0:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.7.3-airgap-mdnac:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.7.3-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.7.3:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.7.4-airgap-mdnac:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.7.4-airgap:::::::* cpe:2.3:o:cisco:digital_network_architecture_center:2.3.7.4:::::::*
Vendors & Products		Cisco Cisco digital Network Architecture Center
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Sep 25, 2024 4:30 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections, which could allow the attacker to intercept traffic between SSH clients and a Cisco Catalyst Center appliance. A successful exploit could allow the attacker to impersonate the affected appliance, inject commands into the terminal session, and steal valid user credentials.
Title		Cisco Catalyst Center Static SSH Host Key Vulnerability
Weaknesses		CWE-321
References		https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-ssh-e4uOdASj
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'}`