CVE-2022-20773

CVE-2022-20773 is a critical vulnerability in Cisco Umbrella Virtual Appliances (VA) stemming from a static SSH host key. This flaw allows an unauthenticated, remote attacker to perform a man-in-the-middle attack on SSH connections, potentially leading to the theft of administrator credentials, configuration changes, or VA reloads. With a CVSS score of 8.1 (High), the attack requires high complexity but has severe impacts on confidentiality, integrity, and availability. While SSH is not enabled by default, there is no evidence of active exploitation, nor are there public exploit codes or Metasploit modules available. However, the vulnerability has garnered some community discussion and media coverage, indicating awareness.