Auth bypass in Cisco Service Control Engine
CVE-2008-0536
Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (management interface outage) via SSH traffic that occurs during management operations and triggers "illegal I/O operations," aka Bug ID CSCsh49563.
Vulnerability class: Broken Authentication
EPSS: 0.043 (90.2th percentile) — read the EPSS interpretation.
Affected products
- Cisco Service_control_engine — versions 3.0
- Icon-labs Iconfidant_ssh
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- psirt@cisco.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- psirt@cisco.com (x_refsource_CONFIRM)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Patch)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (vdb-entry, x_refsource_BID)