ssh2 project records
2 published records for vendor ssh2 project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-354 Improper Validation of Integrity Check Value1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
51Plan | CVE-2023-48795Proof of concept | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypasssh · ssh · CWE-354 | Medium5.9 | — | 93.5% | Dec 18, 2023 |
41Plan | CVE-2020-26301No exploit | Command injection in mscdex/ssh2ssh2 project · ssh2 · CWE-78 | Critical10.0 | — | 3.8% | Sep 20, 2021 |
- CVE-2023-4879551Plan
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas
MediumCVSS 5.9Proof of conceptEPSS 93%ssh · sshDec 18, 2023
- CVE-2020-2630141Plan
Command injection in mscdex/ssh2
CriticalCVSS 10.0No exploitEPSS 3%ssh2 project · ssh2Sep 20, 2021