CVE-1999-1085

mediumPriorität · verfolgen · 21EPSS 0.035 · 89. PerzentilEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

3.50% (89th) EPSS

CVSS 5 · medium

Is it mine?

41 products

Prüfe deine Angriffsfläche

Who says so?

2 sources

enisa_euvd · cisa_csaf_ot

EPSS · bewertet 2026-10-22

SSH 1.2.25, 1.2.23, and other versions, when used in in CBC (Cipher Block Chaining) or CFB (Cipher Feedback 64 bits) modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum for the packet, aka the "SSH insertion attack."

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenUR B30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR B90cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR C30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR C60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR C70cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR C95cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR D30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR D60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR F35cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR F60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR G30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR G60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR L30cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR L60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR L90cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR M60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR N60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR T35cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
BehobenUR T60cisa_csaf_ot
GE strongly recommends users with impacted firmware versions update their UR devices to UR firmware Version 8.10 or greater to resolve these vulnerabilities. GE provides additional mitigations and information about these vulnerabilities in GE Publication Number: GES-2021-004 at https://www.gegridsolutions.com/Passport/Login.aspx (login required).
https://www.gegridsolutions.com/Passport/Login.aspx
MitigationUR B30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR B90cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR C30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR C60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR C70cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR C95cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR D30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR D60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR F35cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR F60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR G30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR G60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR L30cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR L60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR L90cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR M60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR N60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR T35cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.
MitigationUR T60cisa_csaf_ot
GE recommends protecting UR IED by using network defense-in-depth practices. This includes, but is not limited to, placing UR IED inside the control system network security perimeter, and having access controls, monitoring (such as an Intrusion Detection System), and other mitigating technologies in place.

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

5.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.05mediumAV:N/AC:L/Au:N/C:N/I:P/A:Nprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9

v2.04.3mediumAV:N/AC:L/Au:N/C:N/I:P/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.15.3mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Nsecondary · CISA US

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-384US

betroffene Produkte (41)

Betroffene Produkte und Versionsbereiche.

GE Veronva UR B30: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR B90: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR C30: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR C60: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR C70: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR C95: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR D30: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR D60: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR F35: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR F60: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR G30: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR G60: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR L30: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR L60: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR L90: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR M60: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR N60: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR T35: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR T60: <8.10alle Versionencisa_csaf_otUS
GE Veronva UR B30< 8.10cisa_csaf_otUS

20 von 41 angezeigt

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

ICSA-21-075-02GE UR Family (Update A)2021-03-16icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to access sensitive information, reboot the UR, gain privileged access, or cause a denial-of-service condition.

auch bekannt als (2)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

enisa_euvd cisa_csaf_ot NVD CVE.org MITRE

veröffentlicht 1998-06-12geändert 2026-06-16

Referenzen (8)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan