Cisco Stackable Managed Switch SSH Subsystem Message Stack-based 拒绝服务漏洞
CVE编号
CVE-2017-6720利用情况
暂无补丁情况
N/A披露时间
2017-09-21漏洞描述
Cisco Small Business 300 Series Managed Switches等都是美国思科（Cisco）公司的交换机设备。Secure Shell(SSH)subsystem是其中的一个数据加密传输子系统。 多款Cisco产品中的SSH子系统存在拒绝服务漏洞，该漏洞源于程序未能正确的处理SSH连接。远程攻击者可通过登录受影响的交换机并发送恶意的SSH消息利用该漏洞造成拒绝服务（重新加载）。解决建议
目前厂商已发布升级补丁以修复漏洞，补丁获取链接：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-sbms
参考链接 |
|
|---|---|
| http://www.securityfocus.com/bid/100933 | |
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-s... |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | cisco | esw2-350g-52dc_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | esw2-350g-52_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | esw2-550x-48dc_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | esw2-550x-48_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf300-08_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf300-24mp_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf300-24pp_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf300-24p_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf300-24_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf300-48pp_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf300-48p_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf300-48_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf302-08mpp_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf302-08mp_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf302-08pp_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf302-08p_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf302-08_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf350-48mp_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf350-48p_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf350-48_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf500-24p_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf500-24_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf500-48p_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf500-48_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf550x-24mp_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf550x-24p_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf550x-24_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf550x-48mp_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf550x-48p_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sf550x-48_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-10mpp_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-10mp_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-10pp_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-10p_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-10sfp_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-10_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-20_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-28mp_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-28pp_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-28p_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-28_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-52mp_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-52p_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg300-52_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350-10mp_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350-10p_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350-10_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350-28mp_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350-28p_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350-28_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350x-24mp_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350x-24p_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350x-24_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350x-48mp_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350x-48p_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350x-48_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350xg-24f_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350xg-24t_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350xg-2f10_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg350xg-48t_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg355-10p_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500-28mpp_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500-28p_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500-28_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500-52mp_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500-52p_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500-52_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500x-24p_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500x-24_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500x-48p_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500x-48_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg500xg-8f8t_firmware | * | Up to (excluding) 1.4.8.06 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg550x-24mpp_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg550x-24mp_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg550x-24p_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg550x-24_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg550x-48mp_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg550x-48p_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sg550x-48_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sx550x-12f_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sx550x-16ft_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sx550x-24ft_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sx550x-24f_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sx550x-24_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | sx550x-52_firmware | * | Up to (excluding) 2.3.0.130 | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | esw2-350g-52 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | esw2-350g-52dc | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | esw2-550x-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | esw2-550x-48dc | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf300-08 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf300-24 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf300-24mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf300-24p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf300-24pp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf300-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf300-48p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf300-48pp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf302-08 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf302-08mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf302-08mpp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf302-08p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf302-08pp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf350-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf350-48mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf350-48p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf500-24 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf500-24p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf500-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf500-48p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf550x-24 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf550x-24mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf550x-24p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf550x-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf550x-48mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sf550x-48p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-10 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-10mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-10mpp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-10p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-10pp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-10sfp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-20 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-28 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-28mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-28p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-28pp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-52 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-52mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg300-52p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350-10 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350-10mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350-10p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350-28 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350-28mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350-28p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350x-24 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350x-24mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350x-24p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350x-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350x-48mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350x-48p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350xg-24f | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350xg-24t | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350xg-2f10 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg350xg-48t | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg355-10p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500-28 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500-28mpp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500-28p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500-52 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500-52mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500-52p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500x-24 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500x-24p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500x-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500x-48p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg500xg-8f8t | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg550x-24 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg550x-24mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg550x-24mpp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg550x-24p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg550x-48 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg550x-48mp | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sg550x-48p | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sx550x-12f | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sx550x-16ft | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sx550x-24 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sx550x-24f | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sx550x-24ft | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | sx550x-52 | - | - | |||||
- 攻击路径 网络
- 攻击复杂度 低
- 权限要求 低
- 影响范围 未更改
- 用户交互 无
- 可用性 高
- 保密性 无
- 完整性 无
| CWE-ID | 漏洞类型 |
| CWE-119 | 内存缓冲区边界内操作的限制不恰当 |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论