What’s Vulnerable › Vulnerabilities
CVE-2024-20350: Cisco Catalyst Center Static SSH Host Key Vulnerability
- Severity: high (CVSS 8.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-09-25 · updated 2026-06-17
- Weakness: CWE-321
Description
A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections, which could allow the attacker to intercept traffic between SSH clients and a Cisco Catalyst Center appliance. A successful exploit could allow the attacker to impersonate the affected appliance, inject commands into the terminal session, and steal valid user credentials.
Affected products
- Cisco Digital Network Architecture Center (DNA Center): 1.0.0, 1.4.0.0, 2.1.1.0, 2.1.1.3, 2.1.2.0, 2.1.2.3 (+80)
References
Get alerted when CVE-2024-20350 or the next vulnerability affects your stack