Cisco has released an advisory to address this vulnerability, which can be found at: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191106-ssh-1
: Continued use of CBC-mode ciphers (e.g., aes128-cbc ), which are susceptible to side-channel attacks. How to Secure Your Cisco Device ssh-2.0-cisco-1.25 vulnerability
The phrase is a standard identification banner sent by many Cisco devices when a remote connection is initiated . While the banner itself is not a vulnerability, it acts as a "fingerprint" that tells attackers exactly what version of the Cisco SSH software is running, which helps them target specific known flaws. Cisco has released an advisory to address this