CVE-2021-36368
lowpriority · track · 16EPSS 0.017 · 77 %ileDEEURUUSEPSS · scored 2026-10-22
An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the None authentication option, then the user cannot determine whether FIDO authentication is going to confirm that the user wishes to connect to that server, or that the user wishes to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is "this is not an authentication bypass, since nothing is being bypassed.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
No vendor fix yet; a workaround is available.
- WorkaroundSICK TDC-E210GC all Firmware versionssick_psirt
Please make sure that only trusted entities have access to the device. Furthermore, you should apply the following General Security Measures when operating the product to mitigate the associated security risk. The collected resources "SICK Operating Guidelines" and "ICS-CERT recommended practices on Industrial Security" could help to implement the general security practices.
- WorkaroundEndress+Hauser SSG-E210GC all Firmware versionssick_psirt
Please make sure that only trusted entities have access to the device. Furthermore, you should apply the following General Security Measures when operating the product to mitigate the associated security risk. The collected resources "SICK Operating Guidelines" and "ICS-CERT recommended practices on Industrial Security" could help to implement the general security practices.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.6–6.8
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (17)
Products and version ranges known to be affected.
advisories (4)
Vendor and ecosystem advisories describing this.
- SCA-2025-0009Vulnerabilities affecting SICK TDC-E210GC2025-08-01csaf · sick_psirtDE
SICK has identified multiple vulnerabilities in the SICK TDC-E210GC product. The advisory includes a total of 23 vulnerabilities, of which 14 are confirmed as affected and 9 as known not affected. At this time, SICK is not aware of any public exploits specifically targeting these vulnerabilities. Customers are strongly advised to apply the recommended workaround for the affected vulnerabilities to reduce potential risk.
- SCA-2025-0011Vulnerabilities affecting Endress+Hauser SSG-E210GC2025-10-02csaf · sick_psirtDE
Several vulnerabilities in the Endress+Hauser SSG-E210GC product were discoverd. The advisory includes a total of 23 vulnerabilities, of which 14 are confirmed as affected and 9 as known not affected.
- WID-SEC-W-2024-1082Juniper JUNOS: Mehrere SchwachstellenDeutsch2024-05-09csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Juniper JUNOS im Zusammenhang mit OpenSSH ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen oder Dateien zu manipulieren.
- WID-SEC-W-2025-2096NetApp ActiveIQ Unified Manager: Schwachstelle ermöglicht Offenlegung von InformationenDeutsch2025-09-21csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in NetApp ActiveIQ Unified Manager und OpenSSH ausnutzen, um Informationen offenzulegen.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (15)
External citations — patches, advisories, analysis.
- https://bugzilla.mindrot.org/show_bug.cgi?id=3316cnnvd
- https://docs.ssh-mitm.at/trivialauth.htmlcnnvd
- https://github.com/openssh/openssh-portable/pull/258cnnvd
- https://security-tracker.debian.org/tracker/CVE-2021-36368cnnvd
- https://www.openssh.com/security.htmlcnnvd
- https://bugzilla.mindrot.org/show_bug.cgi?id=3316enisa_euvd
- https://docs.ssh-mitm.at/trivialauth.htmlenisa_euvd
- https://github.com/openssh/openssh-portable/pull/258enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan