Ssh-2.0-cisco-1.25 Vulnerability [exclusive]

The SSH-2.0-Cisco-1.25 vulnerability can have significant consequences, including:

The SSH-2.0-Cisco-1.25 vulnerability is caused by a weakness in the way the SSH protocol handles authentication requests. An attacker can exploit this vulnerability by sending a specially crafted SSH packet to the device, which can cause the device to crash or allow the attacker to gain unauthorized access.

: Recent reports in April 2025 highlight a critical RCE vulnerability in the Erlang-based SSH server used in some Cisco product lines. This is a "Perfect 10" severity flaw that allows unauthenticated code execution. Cisco Community How to Verify and Mitigate SSH Terrapin Prefix Truncation Weakness - Cisco Community

This banner is typically found on:

The SSH-2.0-Cisco-1.25 vulnerability affects certain versions of Cisco's SSH implementation, including:

Security audits often list this as a "medium" or "low" risk because of Information Disclosure