0 Helpful. Georg Pauwen. VIP Alumni. 02-16-2021 12:30 AM. Hello, I think the '1.25' part is the Cisco specific vendor version ID. Cisco Community SSH Terrapin Prefix Truncation Weakness - Cisco Community
While the banner is a standard part of the SSH handshake, it is frequently flagged by security scanners (like Nessus or Qualys) as "potentially vulnerable" because it reveals that the device is running an older or specific version of the Cisco SSH server. Cisco Community Understanding the Banner : Indicates the device is using SSH Protocol Version 2.0. Cisco-1.25 ssh-2.0-cisco-1.25 vulnerability
The string SSH-2.0-Cisco-1.25 is not a vulnerability itself, but rather the identifying a Cisco device's SSH service. Because this banner reveals the specific vendor and version, security scanners often flag it to suggest checking for known vulnerabilities associated with Cisco's SSH implementation. 0 Helpful