The SSH-2.0-Cisco-1.25 vulnerability can have significant consequences, including:
The SSH-2.0-Cisco-1.25 vulnerability is caused by a weakness in the way the SSH protocol handles authentication requests. An attacker can exploit this vulnerability by sending a specially crafted SSH packet to the device, which can cause the device to crash or allow the attacker to gain unauthorized access.
: Recent reports in April 2025 highlight a critical RCE vulnerability in the Erlang-based SSH server used in some Cisco product lines. This is a "Perfect 10" severity flaw that allows unauthenticated code execution. Cisco Community How to Verify and Mitigate SSH Terrapin Prefix Truncation Weakness - Cisco Community
This banner is typically found on:
The SSH-2.0-Cisco-1.25 vulnerability affects certain versions of Cisco's SSH implementation, including:
Security audits often list this as a "medium" or "low" risk because of Information Disclosure