Critical OpenSSH Flaw Enables Full System Compromise
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-6387 | A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd) | 8.1 | 100% | PoC ×7 |
From the original article
2 min read at infosecurity-magazine.com
Over 14 million OpenSSH instances exposed to the internet are now at risk following the discovery of a critical vulnerability in OpenSSH’s server, according to a new analysis by Qualys. The remote unauthenticated code execution (RCE) vulnerability (CVE-2024-6387) could lead to full system compromise where an attacker can execute arbitrary code with the highest privileges.
By James Coker · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.