ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2024-2873
9.1критическая

CVE-2024-2873

Описание

A vulnerability was found in wolfSSH's server-side state machine before versions 1.4.17. A malicious client could create channels without first performing user authentication, resulting in unauthorized access.

Затрагиваемое ПО
Wolfssh Wolfssh
CVSS
Балл9.1 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Источники
https://github.com/wolfSSL/wolfssh/pull/670https://github.com/wolfSSL/wolfssh/pull/671https://www.wolfssl.com/docs/security-vulnerabilities/https://github.com/wolfSSL/wolfssh/pull/670https://github.com/wolfSSL/wolfssh/pull/671https://www.wolfssl.com/docs/security-vulnerabilities/