점검 대응높음KEV 미등록
CVE-2022-20773
Cisco Cisco Umbrella Insights Virtual Appliance, umbrella virtual appliance 취약점
A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance (VA) could allow an unauthenticated, remote attacker to impersonate a VA. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability by performing a man-in-the-middle attack on an SSH connection to the Umbrella VA. A successful exploit could allow the attacker to learn the administrator credentials, change configurations, or reload the VA. Note: SSH is not enabled by default on the Umbrella VA.
- 대응 우선순위
- 점검
- CVSS
- 7.5
- EPSS
- 1.13% 백분위 63.1% · 2026.08.02 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2022.04.22