CVE-2024-20350

Summary

CVE-2024-20350 is a newly disclosed vulnerability affecting the SSH server in Cisco Catalyst Center, formerly known as Cisco DNA Center. This issue stems from the presence of a static SSH host key, which can be exploited by unauthenticated, remote attackers. By executing a man-in-the-middle attack on SSH connections, attackers can intercept traffic between SSH clients and a Cisco Catalyst Center appliance. Successful exploitation enables the attacker to impersonate the affected appliance, inject commands into terminal sessions, and ultimately steal valid user credentials.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.