CVE-2018-7750

CVE-2018-7750

Published · Updated

Follow this CVE+ Monitor paramiko+ Monitor paramiko

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

30Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 27%
from disclosure to weapon230 days
Published on NVDMar 13
1st PoC+230d
transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed before processing other requests, as demonstrated by channel-open. A customized SSH client can simply skip the authentication step.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.