Vulnerability · Published Nov 4, 2021 · Assigned by cisco

CVE-2021-40119Cisco Policy Suite Static SSH Keys Vulnerability

Critical 9.8

In plain English

A critical-severity security flaw in Cisco Policy Suite (CPS) Software from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.5% (higher than 85% of all known vulnerabilities).

Severity (CVSS 3.1)9.8Critical

Exploit odds (30 days)2.5%top 15.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability in the key-based SSH authentication mechanism of Cisco Policy Suite could allow an unauthenticated, remote attacker to log in to an affected system as the root user. This vulnerability is due to the re-use of static SSH keys across installations. An attacker could exploit this vulnerability by extracting a key from a system under their control. A successful exploit could allow the attacker to log in to an affected system as the root user.

Affected products (as reported)

Vendor	Product	Versions
Cisco	Cisco Policy Suite (CPS) Software	n/a

Weakness: CWE-321 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

20211103 Cisco Policy Suite Static SSH Keys Vulnerability vendor-advisory, x_refsource_CISCO