Welotec: Multiple products are vulnerable to regreSSHion
view advisory published 2024-08-22
Products from the Edge Gateway Family are affected by recently published so called RegreSSHion vulnerability.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-6387US | high8.1 | Exploit | ||
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauth… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- Mitigation
Disable SSH Access via CLI Command or Config Import locally or for a centrally managed device by changing the configuration in SMART EMSRefer to eG OS manual chapter 4.26 for further information
- Fixed
Update egOS on affected products to version v1.5.4
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan