Cisco IOS SSH2 session Denial of Service Vulnerability

Release date:
Last Updated:
Hazard level:
Vulnerability Type: configuration error
Threat Type: Remote

Vulnerability introduction:

Cisco IOS is the Internet Operating System Used by Cisco network devices.

When the warning information displayed during logon is configured, Cisco IOS 12.2 (58) SE has a vulnerability. Remote attackers can establish two SSH2 sessions to cause denial of service (device overload ).

Vulnerability announcement:

The vendor has released an update patch to fix this security issue.

Reference URL:

Source: supportforums.cisco.com
Link: https://supportforums.cisco.com/message/3356210

Source: www.cisco.com
Link: http://www.cisco.com/en/US/docs/switches/lan/cisco_ie3000/software/release/12.2_58_se/release/notes/OL24335.html