Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-4hzf-4339-13b8
Vulnerability ID VCID-4hzf-4339-13b8
Aliases CVE-2008-5161
Summary Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors.
Status Published
Exploitability 2.0
Weighted Severity 3.3
Risk 6.6
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
cvssv3.1 3.7 http://isc.sans.org/diary.html?storyid=5366
ssvc Track http://isc.sans.org/diary.html?storyid=5366
cvssv3.1 3.7 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
ssvc Track http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
cvssv3.1 3.7 http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
ssvc Track http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
cvssv3.1 3.7 http://marc.info/?l=bugtraq&m=125017764422557&w=2
ssvc Track http://marc.info/?l=bugtraq&m=125017764422557&w=2
cvssv3.1 3.7 http://openssh.org/txt/cbc.adv
ssvc Track http://openssh.org/txt/cbc.adv
cvssv3.1 3.7 http://osvdb.org/49872
ssvc Track http://osvdb.org/49872
cvssv3.1 3.7 http://osvdb.org/50035
ssvc Track http://osvdb.org/50035
cvssv3.1 3.7 http://osvdb.org/50036
ssvc Track http://osvdb.org/50036
cvssv3.1 3.7 http://rhn.redhat.com/errata/RHSA-2009-1287.html
ssvc Track http://rhn.redhat.com/errata/RHSA-2009-1287.html
epss 0.0164 https://api.first.org/data/v1/epss?cve=CVE-2008-5161
epss 0.0164 https://api.first.org/data/v1/epss?cve=CVE-2008-5161
epss 0.0164 https://api.first.org/data/v1/epss?cve=CVE-2008-5161
cvssv3.1 3.7 http://secunia.com/advisories/32740
ssvc Track http://secunia.com/advisories/32740
cvssv3.1 3.7 http://secunia.com/advisories/32760
ssvc Track http://secunia.com/advisories/32760
cvssv3.1 3.7 http://secunia.com/advisories/32833
ssvc Track http://secunia.com/advisories/32833
cvssv3.1 3.7 http://secunia.com/advisories/33121
ssvc Track http://secunia.com/advisories/33121
cvssv3.1 3.7 http://secunia.com/advisories/33308
ssvc Track http://secunia.com/advisories/33308
cvssv3.1 3.7 http://secunia.com/advisories/34857
ssvc Track http://secunia.com/advisories/34857
cvssv3.1 3.7 http://secunia.com/advisories/36558
ssvc Track http://secunia.com/advisories/36558
cvssv3.1 3.7 https://exchange.xforce.ibmcloud.com/vulnerabilities/46620
ssvc Track https://exchange.xforce.ibmcloud.com/vulnerabilities/46620
cvssv3.1 3.7 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667
ssvc Track https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667
cvssv3.1 3.7 https://kc.mcafee.com/corporate/index?page=content&id=SB10106
ssvc Track https://kc.mcafee.com/corporate/index?page=content&id=SB10106
cvssv3.1 3.7 https://kc.mcafee.com/corporate/index?page=content&id=SB10163
ssvc Track https://kc.mcafee.com/corporate/index?page=content&id=SB10163
cvssv3.1 3.7 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11279
ssvc Track https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11279
cvssv3.1 3.7 http://sunsolve.sun.com/search/document.do?assetkey=1-66-247186-1
ssvc Track http://sunsolve.sun.com/search/document.do?assetkey=1-66-247186-1
cvssv3.1 3.7 http://support.apple.com/kb/HT3937
ssvc Track http://support.apple.com/kb/HT3937
cvssv3.1 3.7 http://support.attachmate.com/techdocs/2398.html
ssvc Track http://support.attachmate.com/techdocs/2398.html
cvssv3.1 3.7 http://support.avaya.com/elmodocs2/security/ASA-2008-503.htm
ssvc Track http://support.avaya.com/elmodocs2/security/ASA-2008-503.htm
cvssv3.1 3.7 http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt
ssvc Track http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt
cvssv3.1 3.7 http://www.kb.cert.org/vuls/id/958563
ssvc Track http://www.kb.cert.org/vuls/id/958563
cvssv3.1 3.7 http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/CPNI957037.html
ssvc Track http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/CPNI957037.html
cvssv3.1 3.7 http://www.securityfocus.com/archive/1/498558/100/0/threaded
ssvc Track http://www.securityfocus.com/archive/1/498558/100/0/threaded
cvssv3.1 3.7 http://www.securityfocus.com/archive/1/498579/100/0/threaded
ssvc Track http://www.securityfocus.com/archive/1/498579/100/0/threaded
cvssv3.1 3.7 http://www.securityfocus.com/bid/32319
ssvc Track http://www.securityfocus.com/bid/32319
cvssv3.1 3.7 http://www.securitytracker.com/id?1021235
ssvc Track http://www.securitytracker.com/id?1021235
cvssv3.1 3.7 http://www.securitytracker.com/id?1021236
ssvc Track http://www.securitytracker.com/id?1021236
cvssv3.1 3.7 http://www.securitytracker.com/id?1021382
ssvc Track http://www.securitytracker.com/id?1021382
cvssv3.1 3.7 http://www.ssh.com/company/news/article/953/
ssvc Track http://www.ssh.com/company/news/article/953/
cvssv3.1 3.7 http://www.vupen.com/english/advisories/2008/3172
ssvc Track http://www.vupen.com/english/advisories/2008/3172
cvssv3.1 3.7 http://www.vupen.com/english/advisories/2008/3173
ssvc Track http://www.vupen.com/english/advisories/2008/3173
cvssv3.1 3.7 http://www.vupen.com/english/advisories/2008/3409
ssvc Track http://www.vupen.com/english/advisories/2008/3409
cvssv3.1 3.7 http://www.vupen.com/english/advisories/2009/1135
ssvc Track http://www.vupen.com/english/advisories/2009/1135
cvssv3.1 3.7 http://www.vupen.com/english/advisories/2009/3184
ssvc Track http://www.vupen.com/english/advisories/2009/3184
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-5161.json
https://api.first.org/data/v1/epss?cve=CVE-2008-5161
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5161
1135 http://www.vupen.com/english/advisories/2009/1135
2398.html http://support.attachmate.com/techdocs/2398.html
3172 http://www.vupen.com/english/advisories/2008/3172
3173 http://www.vupen.com/english/advisories/2008/3173
3184 http://www.vupen.com/english/advisories/2009/3184
32319 http://www.securityfocus.com/bid/32319
32740 http://secunia.com/advisories/32740
32760 http://secunia.com/advisories/32760
32833 http://secunia.com/advisories/32833
33121 http://secunia.com/advisories/33121
33308 http://secunia.com/advisories/33308
3409 http://www.vupen.com/english/advisories/2008/3409
34857 http://secunia.com/advisories/34857
36558 http://secunia.com/advisories/36558
46620 https://exchange.xforce.ibmcloud.com/vulnerabilities/46620
472068 https://bugzilla.redhat.com/show_bug.cgi?id=472068
49872 http://osvdb.org/49872
50035 http://osvdb.org/50035
50036 http://osvdb.org/50036
506115 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506115
953 http://www.ssh.com/company/news/article/953/
958563 http://www.kb.cert.org/vuls/id/958563
ASA-2008-503.htm http://support.avaya.com/elmodocs2/security/ASA-2008-503.htm
cbc.adv http://openssh.org/txt/cbc.adv
CPNI957037.html http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/CPNI957037.html
diary.html?storyid=5366 http://isc.sans.org/diary.html?storyid=5366
docDisplay?docId=emr_na-c05157667 https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667
document.do?assetkey=1-66-247186-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-247186-1
GLSA-201405-06 https://security.gentoo.org/glsa/201405-06
HT3937 http://support.apple.com/kb/HT3937
id?1021235 http://www.securitytracker.com/id?1021235
id?1021236 http://www.securitytracker.com/id?1021236
id?1021382 http://www.securitytracker.com/id?1021382
index?page=content&id=JSA10705 http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
index?page=content&id=SB10106 https://kc.mcafee.com/corporate/index?page=content&id=SB10106
index?page=content&id=SB10163 https://kc.mcafee.com/corporate/index?page=content&id=SB10163
?l=bugtraq&m=125017764422557&w=2 http://marc.info/?l=bugtraq&m=125017764422557&w=2
msg00000.html http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
oval%3Aorg.mitre.oval%3Adef%3A11279 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11279
RHSA-2009:1287 https://access.redhat.com/errata/RHSA-2009:1287
RHSA-2009-1287.html http://rhn.redhat.com/errata/RHSA-2009-1287.html
threaded http://www.securityfocus.com/archive/1/498558/100/0/threaded
threaded http://www.securityfocus.com/archive/1/498579/100/0/threaded
Vulnerability_Advisory_SSH.txt http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt
Data source Metasploit
Description Detect SSH Version, and the server encryption
Note 
{}
Ransomware campaign use Unknown
Source URL https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/scanner/ssh/ssh_version.rb
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://isc.sans.org/diary.html?storyid=5366
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://isc.sans.org/diary.html?storyid=5366
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://marc.info/?l=bugtraq&m=125017764422557&w=2
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://marc.info/?l=bugtraq&m=125017764422557&w=2
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://openssh.org/txt/cbc.adv
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://openssh.org/txt/cbc.adv
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://osvdb.org/49872
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://osvdb.org/49872
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://osvdb.org/50035
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://osvdb.org/50035
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://osvdb.org/50036
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://osvdb.org/50036
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://rhn.redhat.com/errata/RHSA-2009-1287.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://rhn.redhat.com/errata/RHSA-2009-1287.html
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://secunia.com/advisories/32740
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://secunia.com/advisories/32740
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://secunia.com/advisories/32760
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://secunia.com/advisories/32760
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://secunia.com/advisories/32833
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://secunia.com/advisories/32833
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://secunia.com/advisories/33121
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://secunia.com/advisories/33121
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://secunia.com/advisories/33308
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://secunia.com/advisories/33308
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://secunia.com/advisories/34857
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://secunia.com/advisories/34857
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://secunia.com/advisories/36558
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://secunia.com/advisories/36558
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://exchange.xforce.ibmcloud.com/vulnerabilities/46620
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at https://exchange.xforce.ibmcloud.com/vulnerabilities/46620
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://kc.mcafee.com/corporate/index?page=content&id=SB10106
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at https://kc.mcafee.com/corporate/index?page=content&id=SB10106
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://kc.mcafee.com/corporate/index?page=content&id=SB10163
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at https://kc.mcafee.com/corporate/index?page=content&id=SB10163
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11279
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11279
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://sunsolve.sun.com/search/document.do?assetkey=1-66-247186-1
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://sunsolve.sun.com/search/document.do?assetkey=1-66-247186-1
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://support.apple.com/kb/HT3937
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://support.apple.com/kb/HT3937
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://support.attachmate.com/techdocs/2398.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://support.attachmate.com/techdocs/2398.html
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://support.avaya.com/elmodocs2/security/ASA-2008-503.htm
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://support.avaya.com/elmodocs2/security/ASA-2008-503.htm
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.kb.cert.org/vuls/id/958563
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://www.kb.cert.org/vuls/id/958563
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/CPNI957037.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://www.rtpro.yamaha.co.jp/RT/FAQ/Security/CPNI957037.html
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.securityfocus.com/archive/1/498558/100/0/threaded
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://www.securityfocus.com/archive/1/498558/100/0/threaded
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.securityfocus.com/archive/1/498579/100/0/threaded
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://www.securityfocus.com/archive/1/498579/100/0/threaded
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.securityfocus.com/bid/32319
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://www.securityfocus.com/bid/32319
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.securitytracker.com/id?1021235
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://www.securitytracker.com/id?1021235
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.securitytracker.com/id?1021236
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://www.securitytracker.com/id?1021236
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.securitytracker.com/id?1021382
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://www.securitytracker.com/id?1021382
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.ssh.com/company/news/article/953/
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://www.ssh.com/company/news/article/953/
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.vupen.com/english/advisories/2008/3172
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://www.vupen.com/english/advisories/2008/3172
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.vupen.com/english/advisories/2008/3173
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://www.vupen.com/english/advisories/2008/3173
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.vupen.com/english/advisories/2008/3409
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://www.vupen.com/english/advisories/2008/3409
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.vupen.com/english/advisories/2009/1135
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://www.vupen.com/english/advisories/2009/1135
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N Found at http://www.vupen.com/english/advisories/2009/3184
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:11:31Z/ Found at http://www.vupen.com/english/advisories/2009/3184
Exploit Prediction Scoring System (EPSS)
Percentile 0.82355
EPSS Score 0.0164
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T16:55:58.296809+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2008/5xxx/CVE-2008-5161.json 38.6.0