System	Score	Found at
cvssv3	5.3	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6210.json
epss	0.92171	https://api.first.org/data/v1/epss?cve=CVE-2016-6210
epss	0.92393	https://api.first.org/data/v1/epss?cve=CVE-2016-6210
epss	0.92393	https://api.first.org/data/v1/epss?cve=CVE-2016-6210
epss	0.92393	https://api.first.org/data/v1/epss?cve=CVE-2016-6210
cvssv2	5	https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1	5.3	https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Reference id	Reference type	URL
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6210.json
		https://api.first.org/data/v1/epss?cve=CVE-2016-6210
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6210
		https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1357442		https://bugzilla.redhat.com/show_bug.cgi?id=1357442
831902		https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831902
CVE-2016-6210	Exploit	http://seclists.org/fulldisclosure/2016/Jul/51
CVE-2016-6210	Exploit	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40113.txt
CVE-2016-6210	Exploit	https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40136.py
RHSA-2017:2029		https://access.redhat.com/errata/RHSA-2017:2029
RHSA-2017:2563		https://access.redhat.com/errata/RHSA-2017:2563
USN-3061-1		https://usn.ubuntu.com/3061-1/

Data source	Exploit-DB
Date added	July 18, 2016
Description	OpenSSHd 7.2p2 - Username Enumeration
Ransomware campaign use	Unknown
Source publication date	July 18, 2016
Exploit type	remote
Platform	linux
Source update date	Dec. 7, 2016
Source URL	http://seclists.org/fulldisclosure/2016/Jul/51

Data source	Metasploit
Description	This module uses a malformed packet or timing attack to enumerate users on an OpenSSH server. The default action sends a malformed (corrupted) SSH_MSG_USERAUTH_REQUEST packet using public key authentication (must be enabled) to enumerate users. On some versions of OpenSSH under some configurations, OpenSSH will return a "permission denied" error for an invalid user faster than for a valid user, creating an opportunity for a timing attack to enumerate users. Testing note: invalid users were logged, while valid users were not. YMMV.
Note	Stability: - crash-service-down Reliability: [] SideEffects: - ioc-in-logs - account-lockouts
Ransomware campaign use	Unknown
Source URL	https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/scanner/ssh/ssh_enumusers.rb

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6210.json

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Exploitability (E)	Access Vector (AV)	Access Complexity (AC)	Authentication (Au)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
high functional unproven proof_of_concept not_defined	local adjacent_network network	high medium low	multiple single none	none partial complete	none partial complete	none partial complete

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Percentile	0.9971
EPSS Score	0.92171
Published At	Aug. 3, 2025, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2025-07-31T08:29:36.624964+00:00	Alpine Linux Importer	Import	https://secdb.alpinelinux.org/v3.2/main.json	37.0.0