Approved changes feed: RSS · Atom

cpe:2.3:a:teraterm_project:ttssh2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTeraterm Project (c0c0898b-8d26-5a6e-9fb1-4b6a00d4a0e0)
ProductTtssh2 (728dd9f4-0664-5cd4-8e9b-4b3d382fd5bb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-60060 vulnerable 2026-07-29 01:03:23.712577 Details available
MEDIUM (6.3)
Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to establish an SSH connection to a server set up by an attacker, out-of-bounds read/write may occur. As a result, the contents of adjacent memory regions may be transmitted to the server, and Tera Term may behave unexpected or terminate abnormally.
Published: 2026-07-17T04:13:38.109Z
Updated: 2026-07-17T13:09:30.703Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-58317 vulnerable 2026-07-29 01:03:16.762662 Details available
MEDIUM (6.3)
Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project. When Tera Term attempts to establish an SSH connection to a server set up by an attacker, out-of-bounds read/write may occur. As a result, the contents of adjacent memory regions may be transmitted to the server, and Tera Term may behave unexpected or terminate abnormally.
Published: 2026-07-17T04:14:03.592Z
Updated: 2026-07-17T13:06:39.880Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.