Approved changes feed: RSS · Atom

cpe:2.3:a:wolfssl_inc.:wolfssh:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWolfssl Inc. (43d9672b-1945-5314-a3e7-7bae3d3b5649)
ProductWolfssh (ba240d4f-b499-547d-a83b-6a3eac6bc16b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2873 vulnerable 2026-06-08 06:35:27.576960 User authentication bypass in wolfSSH server
CRITICAL (9.1)
A vulnerability was found in wolfSSH's server-side state machine before versions 1.4.17. A malicious client could create channels without first performing user authentication, resulting in unauthorized access.
Published: 2024-03-25T21:58:52.325Z
Updated: 2024-08-01T19:50:46.158Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.