access-list 10 permit 192.168.1.0 0.0.0.255 line vty 0 4 access-class 10 in transport input ssh
If immediate patching is not possible, consider temporarily disabling RSA-based public key authentication if it is the primary vector for a known bypass. CVE-2020-3200 Detail - NVD ssh-2.0-cisco-1.25 vulnerability
While this affects many devices showing the Cisco-1.25 banner, it specifically impacts those running the Erlang-based SSH service. Summary of Risk Exposure access-list 10 permit 192
