Host verification bypass and credential leak
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.4epss 0.4%
exploitation probability
0.4%top 63% of all CVEs
observed exploitation
nono source reports it
In short
wolfSSH clients before version 1.4.21 fail to properly verify the server's identity, allowing attackers to impersonate legitimate servers and steal user credentials during SSH connections.
Technical detail
CWE-287 improper authentication in wolfSSH versions ≤1.4.20 enables man-in-the-middle attacks where clients skip or inadequately validate host keys, leading to credential compromise. The vulnerability affects SSH client implementations that rely on this library without proper certificate pinning or host key verification.
Summary generated and translated by AI from the official description.
Improper host authentication vulnerability in wolfSSH version 1.4.20 and earlier clients that allows authentication bypass and leaking of clients credentials.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/AU:Y/U:Red
Affected products
wolfSSL · wolfSSH