Improper input validation in Cisco Service Control Engine
CVE-2008-0534
The SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (device restart or daemon outage) via a high rate of login attempts, aka Bug ID CSCsi68582.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.045 (90.5th percentile) — read the EPSS interpretation.
Affected products
- Cisco Service_control_engine
- Icon-labs Iconfidant_ssh
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- psirt@cisco.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- psirt@cisco.com (x_refsource_CONFIRM)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (vdb-entry, x_refsource_BID)