CVE-2022-20773High· 7.5▾ Twilight

A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance (VA) could allow an unauthenticated, remote attacker to impersonate a VA

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score41/ 100 · Moderate

impact 41.3 · likelihood 0.2 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Apr 21, 2022

Updated

Jun 22, 2026

CVSS

7.5

Vendor

—

Product

—

CWE

CWE-321, CWE-798

Depth score

41 · Moderate

EPSS

1.2% · p68

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS history

Exploit-prediction probability, daily snapshots since Aug 3.

1.1% → 1.2%▲ 0.06%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

4 events · 1607 days

Apr 21, 2022Published
Disclosed via NVD
Jun 22, 2026Record revised
Last analysed / modified upstream
Aug 3, 2026EPSS first tracked
1.1%
Sep 14, 2026EPSS peak
1.1% → 1.2%

CWE-321 CWE-798 #nvd

Full technical detail▾

Overview

A vulnerability in the key-based SSH authentication mechanism of Cisco Umbrella Virtual Appliance (VA) could allow an unauthenticated, remote attacker to impersonate a VA. This vulnerability is due to the presence of a static SSH host key. An attacker could exploit this vulnerability by performing a man-in-the-middle attack on an SSH connection to the Umbrella VA. A successful exploit could allow the attacker to learn the administrator credentials, change configurations, or reload the VA. Note: SSH is not enabled by default on the Umbrella VA.

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd

← Back to feed