CVE-2018-10933
mediumPriorität · beachten · 78EPSS 0.918 · 100. PerzentilExploit · funktionalDEEURUUSEPSS · bewertet 2026-10-22
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.
- MitigationXMC20 R4 using COGE5cisa_csaf_ot
Do not directly connect control systems to the Internet.
- MitigationXMC20 R6 using COGE5cisa_csaf_ot
Do not directly connect control systems to the Internet.
- MitigationFOX61x R1 using CESM1/CESM2cisa_csaf_ot
Hitachi ABB Power Grids recommends security practices and firewall configurations to help protect a process control network from attacks originating from outside the network. Such practices require process control systems be physically protected from direct access by unauthorized personnel, have no direct connections to the Internet, and are separated from other networks by a firewall system that has a minimal number of ports exposed. Other systems must be evaluated on case-by-case basis. Process control systems should not be used for Internet browsing, instant messaging, or receiving e-mails. Portable computers and removable storage media should be carefully scanned for viruses before they are connected to a control system.
- MitigationFOX61x R2 using CESM1/CESM2cisa_csaf_ot
Hitachi ABB Power Grids recommends security practices and firewall configurations to help protect a process control network from attacks originating from outside the network. Such practices require process control systems be physically protected from direct access by unauthorized personnel, have no direct connections to the Internet, and are separated from other networks by a firewall system that has a minimal number of ports exposed. Other systems must be evaluated on case-by-case basis. Process control systems should not be used for Internet browsing, instant messaging, or receiving e-mails. Portable computers and removable storage media should be carefully scanned for viruses before they are connected to a control system.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–critical · 6.4–9.8
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
Exploits (42)
Öffentlicher Proof-of-Concept- und Exploit-Code.
- EDB-46307LibSSH 0.7.6 / 0.8.4 - Unauthorized Accessfunktional · exploit_db
- auxiliary/scanner/ssh/libssh_auth_bypasslibssh Authentication Bypass Scannerfunktional · metasploit
- EDB-45638libSSH - Authentication BypassPoC · exploit_db
- 0xadaw/libSSH-bypassImplementation of CVE-2018-10933 with CIDR block scanner PoC · poc_in_github
- AVA-CEO/CVE-2018-10933-Assessment-AVA-CEO/CVE-2018-10933-Assessment-PoC · poc_in_github
- Bifrozt/CVE-2018-10933CVE-2018-10933PoC · poc_in_github
betroffene Produkte (30)
Betroffene Produkte und Versionsbereiche.
Advisories (4)
Hersteller- und Ökosystem-Meldungen dazu.
- WID-SEC-W-2024-1051libssh: Schwachstelle ermöglicht Umgehen von SicherheitsvorkehrungenDeutsch2018-10-16csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in libssh ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
- cisco-sa-20181019-libsshlibssh Authentication Bypass Vulnerability Affecting Cisco Products: October 20182018-10-19csaf · cisco_csafUS
A vulnerability in libssh could allow an unauthenticated, remote attacker to bypass authentication on a targeted system. The vulnerability is due to improper authentication operations by the server-side state machine of the affected software. An attacker could exploit this vulnerability by presenting a SSH2_MSG_USERAUTH_SUCCESS message to a targeted system. A successful exploit could allow the attacker to bypass authentication and gain unauthorized access to a targeted system.
- ICSA-20-294-02Hitachi ABB Power Grids XMC20 Multiservice-Multiplexer2020-10-20icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow an attacker to remotely take control of the product.
- ICSA-21-007-01Hitachi ABB Power Grids FOX615 Multiservice-Multiplexer2021-01-07icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow an attacker remote access to the device without authentication.
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (38)
Externe Belege — Patches, Meldungen, Analysen.
- http://www.securityfocus.com/bid/105677cnnvd
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10933cnnvd
- https://lists.debian.org/debian-lts-announce/2018/10/msg00010.htmlcnnvd
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0016cnnvd
- https://security.netapp.com/advisory/ntap-20190118-0002/cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-20-294-02cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsa-21-007-01cnnvd
- https://usn.ubuntu.com/3795-1/cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan