Helmholz: Multiple products are vulnerable to regreSSHion
view advisory published 2024-07-31
Several Helmholz products are vulnerable to a possible race condition vulnerability in OpenSSH named "regreSSHion".
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-6387US | high8.1 | Exploit | ||
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauth… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- Mitigation
Prevent all access to the sshd daemon listening on port 22.
- Fixed
Update to latest firmware: * 2.16.1 for myREX24 V2/myREX24 V2 virtual * 8.2.0 for REX200/REX250
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan