7.8
CVE-2008-0536
- EPSS 2.67%
- Veröffentlicht 22.05.2008 13:09:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
- Quelle psirt@cisco.com
- CVE-Watchlists
- Unerledigt
Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x before 3.1.0, and (2) Icon Labs Iconfidant SSH before 2.3.8, allows remote attackers to cause a denial of service (management interface outage) via SSH traffic that occurs during management operations and triggers "illegal I/O operations," aka Bug ID CSCsh49563.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Service Control Engine Version <= 3.1.6
Cisco ≫ Service Control Engine Version3.0
Icon-labs ≫ Iconfidant Ssh Version <= 2.3.7
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.67% | 0.852 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.