CVE-2017-6720 — A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service (DoS) condition

Back Back to CVE browser

MEDIUM

A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service (DoS) condition

Published Sep 21, 2017

6.5

MEDIUM

CVSS 3.1

EPSS 1.40%

Description

A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of SSH connections. An attacker could exploit this vulnerability by logging in to an affected switch via SSH and sending a malicious SSH message. This vulnerability affects the following Cisco products when SSH is enabled: Small Business 300 Series Managed Switches, Small Business 500 Series Stackable Managed Switches, 350 Series Managed Switches, 350X Series Stackable Managed Switches, 550X Series Stackable Managed Switches, ESW2 Series Advanced Switches. Cisco Bug IDs: CSCvb48377.

Affected products

Vendor n/a Product Cisco Small Business Managed Switches Default
n/a
- Version
  Cisco Small Business Managed Switches
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Cisco Small Business Managed Switches

n/a

Version	Status	Constraints
Cisco Small Business Managed Switches	affected	-

Remediation

No remediation recorded yet.

Metrics

1.40% 0.01395

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01395

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Table of values (8 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.40% (0.01395)	71.40th	v5 (v2026.06.15)
Sep 20, 2026	1.40% (0.01395)	71.18th	v5 (v2026.06.15)
Jul 20, 2024	0.11% (0.00108)	44.12th	v3 (v2023.03.01)
Mar 7, 2023	0.11% (0.00109)	42.24th	v3 (v2023.03.01)
Mar 6, 2023	1.05% (0.01055)	52.13th	v2 (v2022.01.01)
Feb 4, 2022	1.05% (0.01055)	27.52th	v2 (v2022.01.01)
Feb 3, 2022	0.98% (0.00976)	26.54th	v5 (v2026.06.15)
Apr 14, 2021	0.98% (0.00976)	0.00th	v1

Weaknesses (1)

CWE-119

Buffer Overflow

References (2)

http://www.securityfocus.com/bid/100933
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-sbms
x_refsource_CONFIRMVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/100933		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-sbms		x_refsource_CONFIRMVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner cisco

Published Sep 21, 2017

Updated Aug 5, 2024

Reserved Mar 9, 2017

Link CVE-2017-6720

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-6720

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-6720