vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2024-20350

Cisco Catalyst Center Static SSH Host Key Vulnerability

HIGH
8.1
CVSS Score
Published: September 25, 2024 at 04:19 PM UTC
Updated: June 17, 2026 at 07:06 AM UTC
2 products affected across 1 vendorCatalyst CenterDigital Network Architecture Center

Using Cisco Digital Network Architecture Center (DNA Center) by Cisco?

Get instant alerts when new vulnerabilities affect Cisco Digital Network Architecture Center (DNA Center) - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
HIGH8.1
Exploit prediction
EPSS 0.4%
SSVC
No known exploit

Description

A vulnerability in the SSH server of Cisco Catalyst Center, formerly Cisco DNA Center, could allow an unauthenticated, remote attacker to impersonate a Cisco Catalyst Center appliance. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability by performing a machine-in-the-middle attack on SSH connections, which could allow the attacker to intercept traffic between SSH clients and a Cisco Catalyst Center appliance. A successful exploit could allow the attacker to impersonate the affected appliance, inject commands into the terminal session, and steal valid user credentials.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Catalyst Center· Cisco
95%
1.0.01.0.0.01.4.0.02.1.1.02.1.1.32.1.2.02.1.2.32.1.2.42.1.2.52.1.2.62.1.2.72.1.2.82.2.1.02.2.1.32.2.2.02.2.2.12.2.2.32.2.2.42.2.2.52.2.2.62.2.2.72.2.2.82.2.2.92.2.3.02.2.3.32.2.3.42.2.3.52.2.3.62.3.2.12.3.2.1-AIRGAP2.3.2.1-AIRGAP-CA2.3.2.1-airgap2.3.2.1-airgap-ca2.3.2.32.3.3.02.3.3.0-AIRGAP2.3.3.0-airgap2.3.3.12.3.3.1-AIRGAP2.3.3.1-airgap2.3.3.32.3.3.3-AIRGAP2.3.3.3-AIRGAP-CA2.3.3.3-airgap2.3.3.3-airgap-ca2.3.3.42.3.3.4 hotfix12.3.3.4-AIRGAP2.3.3.4-AIRGAP-MDNAC2.3.3.4-HF12.3.3.4-airgap2.3.3.4-airgap-mdnac2.3.3.52.3.3.5-AIRGAP2.3.3.5-airgap2.3.3.62.3.3.6-70045 hotfix12.3.3.6-70045-HF12.3.3.6-AIRGAP2.3.3.6-AIRGAP-MDNAC2.3.3.6-airgap2.3.3.6-airgap-mdnac2.3.3.72.3.3.7-723232.3.3.7-72328-AIRGAP2.3.3.7-72328-MDNAC2.3.3.7-72328-airgap2.3.3.7-72328-mdnac2.3.3.7-AIRGAP2.3.3.7-AIRGAP-MDNAC2.3.3.7-airgap2.3.3.7-airgap-mdnac2.3.4.02.3.4.0-AIRGAP2.3.4.0-airgap2.3.4.32.3.4.3-AIRGAP2.3.4.3-airgap2.3.5.02.3.5.0-AIRGAP2.3.5.0-AIRGAP-MDNAC2.3.5.0-airgap2.3.5.0-airgap-mdnac2.3.5.32.3.5.3-AIRGAP2.3.5.3-AIRGAP-MDNAC2.3.5.3-airgap2.3.5.3-airgap-mdnac2.3.5.42.3.5.4-AIRGAP2.3.5.4-AIRGAP-MDNAC2.3.5.4-airgap2.3.5.4-airgap-mdnac2.3.5.52.3.5.5-70026 hotfix512.3.5.5-70026 hotfix522.3.5.5-70026 hotfix532.3.5.5-70026 hotfix702.3.5.5-70026-HF512.3.5.5-70026-HF522.3.5.5-70026-HF532.3.5.5-70026-HF702.3.5.5-AIRGAP2.3.5.5-AIRGAP-MDNAC2.3.5.5-airgap2.3.5.5-airgap-mdnac2.3.6.02.3.6.0-AIRGAP2.3.6.0-airgap2.3.7.02.3.7.0-AIRGAP2.3.7.0-AIRGAP-MDNAC2.3.7.0-VA2.3.7.0-airgap2.3.7.0-airgap-mdnac2.3.7.0-va2.3.7.32.3.7.3-AIRGAP2.3.7.3-AIRGAP-MDNAC2.3.7.3-airgap2.3.7.3-airgap-mdnac2.3.7.42.3.7.4-AIRGAP2.3.7.4-AIRGAP-MDNAC2.3.7.4-airgap2.3.7.4-airgap-mdnac
Digital Network Architecture Center· Cisco
95%
1.0.0.01.4.0.02.1.1.02.1.1.32.1.2.02.1.2.32.1.2.42.1.2.52.1.2.62.1.2.72.1.2.82.2.1.02.2.1.32.2.2.02.2.2.12.2.2.32.2.2.42.2.2.52.2.2.62.2.2.72.2.2.82.2.2.92.2.3.02.2.3.32.2.3.42.2.3.52.2.3.62.3.2.12.3.2.1-airgap2.3.2.1-airgap-ca2.3.2.32.3.3.02.3.3.0-airgap2.3.3.12.3.3.1-airgap2.3.3.32.3.3.3-airgap2.3.3.3-airgap-ca2.3.3.42.3.3.4-airgap2.3.3.4-airgap-mdnac2.3.3.4-hf12.3.3.52.3.3.5-airgap2.3.3.62.3.3.6-70045-hf12.3.3.6-airgap2.3.3.6-airgap-mdnac2.3.3.72.3.3.7-723232.3.3.7-72328-airgap2.3.3.7-72328-mdnac2.3.3.7-airgap2.3.3.7-airgap-mdnac2.3.4.02.3.4.0-airgap2.3.4.32.3.4.3-airgap2.3.5.02.3.5.0-airgap2.3.5.0-airgap-mdnac2.3.5.32.3.5.3-airgap2.3.5.3-airgap-mdnac2.3.5.42.3.5.4-airgap2.3.5.4-airgap-mdnac2.3.5.52.3.5.5-70026-hf512.3.5.5-70026-hf522.3.5.5-70026-hf532.3.5.5-70026-hf702.3.5.5-airgap2.3.5.5-airgap-mdnac2.3.6.02.3.6.0-airgap2.3.7.02.3.7.0-airgap2.3.7.0-airgap-mdnac2.3.7.0-va2.3.7.32.3.7.3-airgap2.3.7.3-airgap-mdnac2.3.7.42.3.7.4-airgap2.3.7.4-airgap-mdnac

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (1)

Vendor Advisory
Source: [email protected]
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-ssh-e4uOdASj

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

8.1HIGH[email protected]
Attack Vector
NETWORK
Complexity
HIGH
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusANALYZED
CWE
CWE-321

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card