GCVE - cpe:2.3:a:ssh_\&_web_terminal_project:ssh_\&_web_terminal:*:*:*:*:*:home

Approved changes feed: RSS · Atom

cpe:2.3:a:ssh_\&_web_terminal_project:ssh_\&_web_terminal:*:*:*:*:*:home_assistant:*:*

part: a version: * update: *

Vendor	Ssh & Web Terminal Project (`fcfc1a4d-66d2-5d8e-9d10-51fa44023a2d`)
Product	Ssh & Web Terminal (`eb0ec249-aab4-5703-b662-5ecda0c6b427`)
Edition	*
Language	*
Software edition	*
Target software	home_assistant
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-45099`	vulnerable	2026-06-08 05:36:47.818266	Details available The addon.stdin service in addon-ssh (aka Home Assistant Community Add-on: SSH & Web Terminal) before 10.0.0 has an attack surface that requires social engineering. NOTE: the vendor does not agree that this is a vulnerability; however, addon.stdin was removed as a defense-in-depth measure against complex social engineering situations Published: 2021-12-16T04:20:38.000Z Updated: 2024-11-18T19:59:49.312Z Open on db.gcve.eu Reference links https://github.com/hassio-addons/addon-ssh/releases/tag/v10.0.0 https://gist.github.com/Eriner/0872628519f70556d2c26c83439a9f67	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.