Yüksek CVSS 8.1 PoC var
CVE-2024-6387: Sma 6200 Firmware: güvenlik açığı
Açıklama (NVD)
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
Özet bilgiler
- Ürün
- Sonicwall Sma 6200 Firmware
- CVSS v3.1
- 8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %99,51 (yüzdelik 100)
- CWE
- CWE-364
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| sonicwall-sma-6200-firmware | — | — | — |
| sonicwall-sma-7200-firmware | — | — | — |
| arista-eos | 4.32.0 | 4.32.1f | — |
| canonical-ubuntu-linux | 23.10 | 23.10 | — |
| canonical-ubuntu-linux | 24.04 | 24.04 | — |
| almalinux-almalinux | 9.0 | 9.0 | — |
| sonicwall-sma-6210-firmware | — | — | — |
| sonicwall-sma-7210-firmware | — | — | — |
| sonicwall-sma-8200v-firmware | — | — | — |
| sonicwall-sra-ex-7000-firmware | — | — | — |
| netapp-a1k-firmware | — | — | — |
| netapp-a70-firmware | — | — | — |
| netapp-a90-firmware | — | — | — |
| netapp-a700s-firmware | — | — | — |
| netapp-8300-firmware | — | — | — |
| netapp-8700-firmware | — | — | — |
| netapp-a400-firmware | — | — | — |
| netapp-c400-firmware | — | — | — |
| netapp-a250-firmware | — | — | — |
| netapp-500f-firmware | — | — | — |
| netapp-c250-firmware | — | — | — |
| netapp-a800-firmware | — | — | — |
| netapp-c800-firmware | — | — | — |
| netapp-a900-firmware | — | — | — |
| netapp-a9500-firmware | — | — | — |
| netapp-c190-firmware | — | — | — |
| netapp-a150-firmware | — | — | — |
| netapp-a220-firmware | — | — | — |
| netapp-fas2720-firmware | — | — | — |
| netapp-fas2750-firmware | — | — | — |
İlgili haberler
Kaynaklar
- NVD kaydı
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- santandersecurityresearch.github.io
- www.openssh.com
- www.qualys.com
- seclists.org
- seclists.org
- seclists.org
- www.openwall.com
- www.openwall.com
- www.openwall.com
- www.openwall.com
- www.openwall.com
- www.openwall.com
- www.openwall.com
- www.openwall.com
- www.openwall.com
- CWE-364