Ssh-2.0-cisco-1.25 Vulnerability 〈Editor's Choice〉

A flaw in the SSH server code allows an authenticated remote attacker to cause a device reload. This occurs due to an internal state machine error that can be triggered by specific traffic patterns, leading to a DoS condition .

This version is known to be susceptible to several critical cryptographic weaknesses, including insecure key exchange algorithms, outdated encryption ciphers, and specific Cisco-branded vulnerabilities. If left unpatched, these vulnerabilities can allow attackers to intercept communications (Man-in-the-Middle), decrypt traffic, or gain unauthorized administrative access. ssh-2.0-cisco-1.25 vulnerability

—identifying the exact operating system and software version to find matching exploits. Several critical vulnerabilities have affected Cisco devices running versions associated with this banner over the years: NetCom Learning SSH Terrapin Prefix Truncation Weakness - Cisco Community A flaw in the SSH server code allows

Example fixed banner after upgrade: