CVE-2017-6720

A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of SSH connections. An attacker could exploit this vulnerability by logging in to an affected switch via SSH and sending a malicious SSH message. This vulnerability affects the following Cisco products when SSH is enabled: Small Business 300 Series Managed Switches, Small Business 500 Series Stackable Managed Switches, 350 Series Managed Switches, 350X Series Stackable Managed Switches, 550X Series Stackable Managed Switches, ESW2 Series Advanced Switches. Cisco Bug IDs: CSCvb48377.

• CWE-119
• CWE-119

• http://www.securityfocus.com/bid/100933Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-sbmsVendor Advisory
• http://www.securityfocus.com/bid/100933Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-sbmsVendor Advisory

Published

Sep 21, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6714A vulnerability in the AutoIT service of Cisco Ultra Service…
• CVE-2017-6715A vulnerability in the web framework of Cisco Firepower Mana…
• CVE-2017-6716A vulnerability in the web framework code of Cisco Firepower…
• CVE-2017-6717A vulnerability in the web framework of Cisco Firepower Mana…
• CVE-2017-6718A vulnerability in the CLI of Cisco IOS XR Software could al…
• CVE-2017-6719A vulnerability in the CLI of Cisco IOS XR Software could al…
• CVE-2017-6721A vulnerability in the ingress processing of fragmented TCP …
• CVE-2017-6722A vulnerability in the Extensible Messaging and Presence Pro…
• CVE-2017-6724A vulnerability in the web framework code of Cisco Prime Inf…
• CVE-2017-6725A vulnerability in the web framework code of Cisco Prime Inf…
• CVE-2017-6726A vulnerability in the CLI of the Cisco Prime Network Gatewa…
• CVE-2017-6727A vulnerability in the Server Message Block (SMB) protocol o…