CVE-2024-6387
highpriority · attend · 77EPSS 0.995 · 100 %ileexploit · PoCCHDEEUNLRUUSEPSS · scored 2026-10-22
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedSINAMICS IIoT modulesiemens_psirt
Update to V1.0 HF1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989288/ - FixedSINEMA Remote Connect Serversiemens_psirt
Update to V3.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974084/ - FixedSINUMERIK ONEsiemens_psirt
Update to V6.24 or later version Updated software version can be obtained from Siemens customer support or a local partner.
- FixedFirmware TruControl <1.60.0 installed on TruDiodetrumpf_psirt
Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00
- FixedFirmware TruControl <1.60.0 installed on TruDisktrumpf_psirt
Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00
- FixedFirmware TruControl <1.60.0 installed on TruMicro 2000trumpf_psirt
Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00
- FixedFirmware TruControl <1.60.0 installed on TruMicro 5000trumpf_psirt
Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00
- FixedFirmware TruControl <1.60.0 installed on TruMicro 6000trumpf_psirt
Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00
- FixedFirmware TruControl <1.60.0 installed on TruMicro 7000trumpf_psirt
Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00
- FixedFirmware TruControl <1.60.0 installed on TruMicro 8000trumpf_psirt
Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00
- FixedFirmware TruControl <1.60.0 installed on TruMicro 9000trumpf_psirt
Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00
- FixedFirmware TruControl <1.60.0 installed on TruPulsetrumpf_psirt
Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00
- FixedFirmware TruControl <1.60.0 installed on redpowerDirecttrumpf_psirt
Update to first fixed version 1.06.00 or ideally to the newest release 04.04.00
- Fixedmb_connect_line_psirt
Update to latest firmware: 2.16.1 for mbCONNECT24/mymbCONNECT24 8.2.0 for mbNET/mbNET.rokey
- Fixedwelotec_psirt
Update egOS on affected products to version v1.5.4
- Fixedhelmholz_psirt
Update to latest firmware: * 2.16.1 for myREX24 V2/myREX24 V2 virtual * 8.2.0 for REX200/REX250
- Fixedphoenix_contact_psirt
Phoenix Contact strongly recommends upgrading affected mGuard devices to firmware version 8.9.3 / 10.4.1 or higher which fixes this vulnerability.
- Fixedpepperl_fuchs_psirt
Update to the Firmware version 1.15.0.0. A firmware update will be made available shortly on the corresponding product page on the Pepper+Fuchs Homepage.
- Fixedphoenix_contact_psirt
Update to the latest 2024.0.6 LTS Firmware Release. PHOENIX CONTACT recommends to always use an up-to-date version of the PLCnext Engineer.
- FixedCisco Catalyst SD-WANcisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Catalyst SD-WAN Controllercisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Catalyst SD-WAN Managercisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedSINAMICS IIoT modulecisa_csaf_ot
Update to V1.0 HF1 or later version
https://support.industry.siemens.com/cs/ww/en/view/109989288/ - FixedSINEMA Remote Connect Servercisa_csaf_ot
Update to V3.2 SP2 or later version
https://support.industry.siemens.com/cs/ww/en/view/109974084/ - FixedSINUMERIK ONEcisa_csaf_ot
Update to V6.24 or later version Updated software version can be obtained from Siemens customer support or a local partner.
- MitigationArctic ARC600 with firmware version>=3.4.10 to <=3.4.13abb_psirt
The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.
- MitigationArctic ARG600 with firmware version>=3.4.10 to <=3.4.13abb_psirt
The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.
- MitigationArctic ARP600 with firmware version>=3.4.10 to <=3.4.13abb_psirt
The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.
- MitigationArctic ARR600 with firmware version>=3.4.10 to <=3.4.13abb_psirt
The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.
- MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)siemens_psirt
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationIndustrial Edge Management OS (IEM-OS)siemens_psirt
Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks
- MitigationSINAMICS IIoT modulesiemens_psirt
Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks
- MitigationSINEMA Remote Connect Serversiemens_psirt
Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks
- MitigationSINUMERIK ONEsiemens_psirt
Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks
- Mitigationmb_connect_line_psirt
Prevent all access to the sshd daemon listening on port 22.
- Mitigationwelotec_psirt
Disable SSH Access via CLI Command or Config Import locally or for a centrally managed device by changing the configuration in SMART EMSRefer to eG OS manual chapter 4.26 for further information
- Mitigationhelmholz_psirt
Prevent all access to the sshd daemon listening on port 22.
- Mitigationphoenix_contact_psirt
Access to the SSH server should be limited to trustworthy networks or peers.
- MitigationIndustrial Edge Management OS (IEM-OS)cisa_csaf_ot
Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks
- MitigationSINAMICS IIoT modulecisa_csaf_ot
Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks
- MitigationSINEMA Remote Connect Servercisa_csaf_ot
Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks
- MitigationSINUMERIK ONEcisa_csaf_ot
Change the default SSH port (22/tcp) to a nonstandard port to minimize success of automated attacks
- MitigationArctic ARC600 with firmware version>=3.4.10 to <=3.4.13cisa_csaf_ot
The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.
- MitigationArctic ARG600 with firmware version>=3.4.10 to <=3.4.13cisa_csaf_ot
The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.
- MitigationArctic ARP600 with firmware version>=3.4.10 to <=3.4.13cisa_csaf_ot
The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.
- MitigationArctic ARR600 with firmware version>=3.4.10 to <=3.4.13cisa_csaf_ot
The following mitigations can be considered • Obtain a private cellular access point to limit impact of any potential exploit. Contact your cellular provider for availability. • Mitigate the cellular module vulnerabilities by contacting the mobile network operator and requesting to disable binary SMS for your mobile subscription. o Note that binary SMS service is often disabled by default based on operator restrictions. o If SMS services are not used in the solution, consider disabling them completely. • Establish remote connections through OpenVPN. If the SSH protocol is used for remote administration of Arctic wireless gateway, it is to be considered logging in to the wireless gateway through an OpenVPN tunnel. • Do not expose SSH port to public networks. Keep the SSH port closed to public networks and thus limit the number of potential attackers who can attempt to exploit the vulnerability. This way only devices within your private network or those connected through a secure VPN can access the SSH server. • Restrict physical access to the product. Refer to section General security recommendations for further advice on how to keep your system secure.
- MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- MitigationSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)cisa_csaf_ot
Limit access to the interactive shell of the additional GNU/Linux subssytem to trusted personnel only.
- No fix availableSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)siemens_psirt
Currently no fix is available
- No fix availableSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)siemens_psirt
Currently no fix is available
- No fix availableSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)siemens_psirt
Currently no fix is available
- No fix availableSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)siemens_psirt
Currently no fix is available
- No fix availableSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)siemens_psirt
Currently no fix is available
- No fix availableSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0)cisa_csaf_ot
Currently no fix is available
- No fix availableSIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0)cisa_csaf_ot
Currently no fix is available
- No fix availableSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0)cisa_csaf_ot
Currently no fix is available
- No fix availableSIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)cisa_csaf_ot
Currently no fix is available
- No fix availableSIPLUS S7-1500 CPU 1518-4 PN/DP MFP (6AG1518-4AX00-4AC0)cisa_csaf_ot
Currently no fix is available
- No fix plannedIndustrial Edge Management OS (IEM-OS)siemens_psirt
Currently no fix is planned
- No fix plannedIndustrial Edge Management OS (IEM-OS)cisa_csaf_ot
Currently no fix is planned
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.1–9
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (96)
Public proof-of-concept and weaponised exploit code.
- EDB-52269OpenSSH server (sshd) 9.8p1 - Race ConditionPoC · exploit_db
- 4lxprime/regreSSHiverewrited SSH Exploit for CVE-2024-6387 (regreSSHion)PoC · poc_in_github
affected products (612)
Products and version ranges known to be affected.
- Aruba EdgeConnect SD-WAN Orchestratorall versionscert_bundDEcpe:/a:aruba:edgeconnect:sd-wan_orchestrator
- Cisco ASA (Adaptive Security Appliance)all versionscert_bundDEcpe:/h:cisco:adaptive_security_appliance:-
- Cisco Aironet Access Point 1540all versionscert_bundDEcpe:/o:cisco:aironet_access_point_software:1540_series
- Cisco Aironet Access Point 1560all versionscert_bundDEcpe:/o:cisco:aironet_access_point_software:1560_series
- Cisco Aironet Access Point 802.11ac Wave2all versionscert_bundDEcpe:/o:cisco:aironet_access_point_software:802.11ac_wave2
- Cisco Application Policy Infrastructure Controllerall versionscert_bundDEcpe:/a:cisco:application_policy_infrastructure_controller:-
- Cisco Catalyst 9100 Series Access Pointsall versionscert_bundDEcpe:/h:cisco:catalyst:9100_series_access_points
- Cisco Catalyst 9800 Series Wireless Controllersall versionscert_bundDEcpe:/h:cisco:catalyst:9800_series_wireless_controllers
- Cisco Catalyst IW6300 Heavy Duty Series Access Pointsall versionscert_bundDEcpe:/h:cisco:catalyst:iw6300_heavy_duty_series_access_points
advisories (24)
Vendor and ecosystem advisories describing this.
- 2NGA002427ABB Arctic ARG600, ARC600, ARR600, ARP600 Arctic Wireless Gateway Modem Module and OpenSSH vulnerabilities2025-04-07csaf · abb_psirtCH
ABB is aware of public reports of the vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploited modem module vulnerabilities could run arbitrary code in the wireless modem module of the product. This could lead to denial of service or tampering with unencrypted traffic. An attacker who successfully exploited the OpenSSH vulnerability could run arbitrary code in the product with privileged user permissions. This could cause the product to stop, make the product inaccessible, or the attacker could take control of the product. As part of ABB product lifecycle policy, once a product transitions to Limited state, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document to mitigate security risks.
- NCSC-2024-0272Kwetsbaarheid verholpen in OpenSSHNL2024-07-01csaf · ncsc_nlNL
De ontwikkelaars van OpenSSH hebben een kwetsbaarheid verholpen in OpenSSH
- NCSC-2024-0320Kwetsbaarheden verholpen in Apple MacOSNL2024-07-30csaf · ncsc_nlNL
Apple heeft kwetsbaarheden verholpen in MacOS.
- NCSC-2024-0362Kwetsbaarheden verholpen in Siemens productenNL2024-09-10csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Mendix, SICAM, SIMATIC, SINEMA, SINUMERIK en Tecnomatix.
- NCSC-2024-0414Kwetsbaarheden verholpen in Oracle CommunicationsNL2024-10-17csaf · ncsc_nlNL
Oracle heeft kwetsbaarheden verholpen in diverse Communications producten en systemen.
- NCSC-2025-0166Kwetsbaarheden verholpen in Fortinet productenNL2025-05-14csaf · ncsc_nlNL
Fortinet heeft kwetsbaarheden verholpen in FortiManager, FortiManager Cloud, FortiAnalyzer, FortiOS, FortiProxy, FortiPAM, FortiSRA, FortiSwitchManager en FortiWeb.
- NCSC-2025-0187Kwetsbaarheden verholpen in Siemens productenNL2025-06-10csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als RUGGEDCOM, SCALANCE, SIMATIC en Tecnomatix
- SSA-082556SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.52025-06-10csaf · siemens_psirtDE
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fixes and recommends specific mitigations for products where fixes are not or not yet available. SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5 is no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version. Note: This SSA advises vulnerabilities for firmware version V3.1.5 only; for version V3.1.6 refer to SSA-019113.
- SSA-446545SSA-446545: Impact of RegreSSHion (CVE-2024-6387) in Siemens Industrial Products2024-09-10csaf · siemens_psirtDE
An OpenSSH vulnerability, known as regreSSHion, affects multiple Siemens industrial products. This security regression vulnerability consists in a race condition which may allow an unauthenticated remote attacker to achieve remote code execution with high impact on the affected system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
- VDE-2024-040Multiple TRUMPF products prone to regreSSHion OpenSSH server vulnerabilities2024-06-25csaf · trumpf_psirtDE
TruControl laser control software prior to version 1.60.0 uses an OpenSSH server version affected by CVE-2024-6387. The affected OpenSSH Server version could potentially lead to a remote code execution.
- VDE-2024-042MB connect line: Multiple products are vulnerable to regreSSHion2023-08-17csaf · mb_connect_line_psirtDE
Several Red Lion Europe products are vulnerable to a possible race condition vulnerability in OpenSSH named "regreSSHion".
- VDE-2024-043Welotec: Multiple products are vulnerable to regreSSHion2024-08-22csaf · welotec_psirtDE
Products from the Edge Gateway Family are affected by recently published so called RegreSSHion vulnerability.
- VDE-2024-044Helmholz: Multiple products are vulnerable to regreSSHion2024-07-31csaf · helmholz_psirtDE
Several Helmholz products are vulnerable to a possible race condition vulnerability in OpenSSH named "regreSSHion".
- VDE-2024-051Phoenix Contact: Multiple mGuard devices are vulnerable to a remote code injection due to SSH2024-09-10csaf · phoenix_contact_psirtDE
mGuards use an OpenSSH server for SSH access. This server is vulnerable to a remote code injection.
- VDE-2024-063PEPPERL+FUCHS: Multiple products are affected by regreSSHion2024-10-08csaf · pepperl_fuchs_psirtDE
The affected devices run a SSH server that is affected by the regreSSHion vulnerability despite the fact that no user can actually log in through SSH. Attackers may exploit this vulnerability to gain root access to the device.
- VDE-2024-071Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware2024-12-09csaf · phoenix_contact_psirtDE
Multiple Linux component vulnerabilities fixed in latest PLCnext Firmware release 2024.0.6 LTS
- WID-SEC-W-2024-1486OpenSSH: Schwachstelle ermöglicht CodeausführungDeutsch2024-06-30csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenSSH ausnutzen, um beliebigen Programmcode mit root Rechten auszuführen.
- WID-SEC-W-2024-1725Apple macOS: Mehrere SchwachstellenDeutsch2024-07-29csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apple macOS ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code mit Administratorrechten auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Daten zu modifizieren, den Benutzer zu täuschen, Sicherheitsmaßnahmen zu umgehen und vertrauliche Informationen offenzulegen.
- WID-SEC-W-2024-3195Oracle Communications: Mehrere SchwachstellenDeutsch2024-10-15csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
- WID-SEC-W-2026-1208Oracle Systems: Mehrere SchwachstellenDeutsch2026-04-21csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Systems ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
- cisco-sa-openssh-rce-2024Remote Unauthenticated Code Execution Vulnerability in OpenSSH Server (regreSSHion): July 20242024-07-02csaf · cisco_csafUS
On July 1, 2024, the Qualys Threat Research Unit (TRU) disclosed an unauthenticated, remote code execution vulnerability that affects the OpenSSH server (sshd) in glibc-based Linux systems. CVE-2024-6387: A signal handler race condition was found in sshd, where a client does not authenticate within LoginGraceTime seconds (120 by default, 600 in old OpenSSH versions), then the sshd SIGALRM handler is called asynchronously. However, this signal handler calls various functions that are not async-signal-safe, for example, syslog(). For a description of this vulnerability, see the Qualys Security Advisory ["https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt"].
- ICSA-24-256-15Siemens Industrial Products2024-09-10icsa · cisa_csaf_otUS
An OpenSSH vulnerability, known as regreSSHion, affects multiple Siemens industrial products. This security regression vulnerability consists in a race condition which may allow an unauthenticated remote attacker to achieve remote code execution with high impact on the affected system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
- ICSA-25-100-09ABB Arctic Wireless Gateways2025-04-07icsa · cisa_csaf_otUS
ABB is aware of public reports of the vulnerabilities in the product versions listed as affected in this advisory. An attacker who successfully exploited modem module vulnerabilities could run arbitrary code in the wireless modem module of the product. This could lead to denial of service or tampering with unencrypted traffic. An attacker who successfully exploited the OpenSSH vulnerability could run arbitrary code in the product with privileged user permissions. This could cause the product to stop, make the product inaccessible, or the attacker could take control of the product. As part of ABB product lifecycle policy, once a product transitions to Limited state, we discontinue maintenance, security patches, and technical support to focus on current and future technologies. While the product will continue to function, we strongly recommend implementing mitigations defined in this document to mitigate security risks.
- ICSA-25-162-05Siemens SIMATIC S7-1500 CPU family2025-06-10icsa · cisa_csaf_otUS
Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.5 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fix versions and recommends countermeasures for products where fixes are not, or not yet available.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (162)
External citations — patches, advisories, analysis.
- http://www.openwall.com/lists/oss-security/2024/07/01/12cnnvd
- http://www.openwall.com/lists/oss-security/2024/07/01/13cnnvd
- http://www.openwall.com/lists/oss-security/2024/07/02/1cnnvd
- http://www.openwall.com/lists/oss-security/2024/07/03/1cnnvd
- http://www.openwall.com/lists/oss-security/2024/07/03/11cnnvd
- http://www.openwall.com/lists/oss-security/2024/07/03/2cnnvd
- http://www.openwall.com/lists/oss-security/2024/07/03/3cnnvd
- http://www.openwall.com/lists/oss-security/2024/07/03/4cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan