The Management Interface on Cisco Content Services Switch (CSS) 11500 devices 8.20.4.02 and earlier allows remote attackers to bypass intended restrictions on local-network device access via crafted SSH packets, aka Bug ID CSCut14855.
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Link | Tags |
---|---|
http://www.securitytracker.com/id/1031939 | vdb entry |
http://tools.cisco.com/security/center/viewAlert.x?alertId=37889 | vendor advisory |