WID-SEC-W-2025-0394
Vulnerability from csaf_certbund - Published: 2025-02-17 23:00 - Updated: 2026-02-02 23:00Summary
OpenSSH: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: OpenSSH ist eine Open Source Implementierung des Secure Shell Protokolls.
Angriff: Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSH ausnutzen, um kryptografische Sicherheitsvorkehrungen zu umgehen und um einen Denial of Service Zustand herbeizuführen.
Betroffene Betriebssysteme: - Linux
- UNIX
- Windows
Affected products
Known affected
55 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Security Verify Access <11.0.2
IBM / Security Verify Access
|
<11.0.2 | ||
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM AIX 7.3
IBM / AIX
|
cpe:/o:ibm:aix:7.3
|
7.3 | |
|
Open Source OpenSSH <9.9p2
Open Source / OpenSSH
|
<9.9p2 | ||
|
Open Source OpenSSH 9.5p1-9.9p1
Open Source / OpenSSH
|
cpe:/a:openbsd:openssh:9.5p1
|
9.5p1-9.9p1 | |
|
Open Source OpenSSH 6.8p1-9.9p1
Open Source / OpenSSH
|
cpe:/a:openbsd:openssh:6.8p1
|
6.8p1-9.9p1 | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Siemens SIMATIC S7 1500 CPU
Siemens / SIMATIC S7
|
cpe:/h:siemens:simatic_s7:1500_cpu
|
1500 CPU | |
|
Dell PowerScale OneFS OneFS
Dell / PowerScale OneFS
|
cpe:/a:dell:powerscale_onefs:onefs
|
OneFS | |
|
IBM AIX 7.2
IBM / AIX
|
cpe:/o:ibm:aix:7.2
|
7.2 | |
|
IBM Power Hardware Management Console
IBM
|
cpe:/a:ibm:hardware_management_console:-
|
— | |
|
IBM VIOS 3.1
IBM / VIOS
|
cpe:/a:ibm:vios:3.1
|
3.1 | |
|
IBM VIOS 4.1
IBM / VIOS
|
cpe:/a:ibm:vios:4.1
|
4.1 | |
|
Gentoo Linux
Gentoo
|
cpe:/o:gentoo:linux:-
|
— | |
|
NetApp Data ONTAP 9
NetApp / Data ONTAP
|
cpe:/a:netapp:data_ontap:9
|
9 | |
|
Dell Avamar
Dell
|
cpe:/a:dell:avamar:-
|
— | |
|
Dell PowerScale OneFS OneFS <9.10.1.3
Dell / PowerScale OneFS
|
OneFS <9.10.1.3 | ||
|
Dell PowerScale OneFS OneFS <9.11.0.1
Dell / PowerScale OneFS
|
OneFS <9.11.0.1 | ||
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
NetApp AFF
NetApp
|
cpe:/h:netapp:aff:-
|
— | |
|
SUSE openSUSE
SUSE
|
cpe:/o:suse:opensuse:-
|
— | |
|
Fortinet FortiManager <7.4.7
Fortinet / FortiManager
|
<7.4.7 | ||
|
Fortinet FortiManager <7.2.11
Fortinet / FortiManager
|
<7.2.11 | ||
|
IBM Security Verify Access <10.0.9.1
IBM / Security Verify Access
|
<10.0.9.1 | ||
|
OpenBSD OpenBSD 7.5
OpenBSD / OpenBSD
|
cpe:/a:openbsd:openbsd:7.5
|
7.5 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
FreeBSD Project FreeBSD OS
FreeBSD Project
|
cpe:/o:freebsd:freebsd:-
|
— | |
|
NetApp FAS
NetApp
|
cpe:/h:netapp:fas:-
|
— | |
|
Dell NetWorker
Dell / NetWorker
|
cpe:/a:dell:networker:virtual
|
— | |
|
OpenBSD OpenBSD 7.6
OpenBSD / OpenBSD
|
cpe:/a:openbsd:openbsd:7.6
|
7.6 | |
|
Fortinet FortiAnalyzer <7.6.3
Fortinet / FortiAnalyzer
|
<7.6.3 | ||
|
Fortinet FortiAnalyzer <7.4.7
Fortinet / FortiAnalyzer
|
<7.4.7 | ||
|
Fortinet FortiAnalyzer <7.2.11
Fortinet / FortiAnalyzer
|
<7.2.11 | ||
|
Fortinet FortiManager <7.6.3
Fortinet / FortiManager
|
<7.6.3 | ||
|
Dell integrated Dell Remote Access Controller <7.00.00.181
Dell / integrated Dell Remote Access Controller
|
<7.00.00.181 | ||
|
Dell integrated Dell Remote Access Controller <7.20.30.50
Dell / integrated Dell Remote Access Controller
|
<7.20.30.50 | ||
|
F5 BIG-IP
F5
|
cpe:/a:f5:big-ip:-
|
— | |
|
Dell PowerProtect Data Domain <7.13.1.40
Dell / PowerProtect Data Domain
|
<7.13.1.40 | ||
|
Dell PowerProtect Data Domain <7.10.1.70
Dell / PowerProtect Data Domain
|
<7.10.1.70 | ||
|
Securepoint UTM <14.0.2
Securepoint / UTM
|
<14.0.2 | ||
|
Dell PowerProtect Data Domain <8.3.1.10
Dell / PowerProtect Data Domain
|
<8.3.1.10 | ||
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
QNAP NAS QuTS hero <h5.2.4.3079 build 20250321
QNAP / NAS
|
QuTS hero <h5.2.4.3079 build 20250321 | ||
|
QNAP NAS QTS <5.2.4.3079 build 20250321
QNAP / NAS
|
QTS <5.2.4.3079 build 20250321 | ||
|
Meinberg LANTIME <7.08.023
Meinberg / LANTIME
|
<7.08.023 | ||
|
Dell PowerProtect Data Domain <8.4.0.0
Dell / PowerProtect Data Domain
|
<8.4.0.0 | ||
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Dell NetWorker <19.12.0.2
Dell / NetWorker
|
<19.12.0.2 | ||
|
Dell NetWorker <19.11.0.6
Dell / NetWorker
|
<19.11.0.6 | ||
|
WatchGuard Firebox <12.11.3
WatchGuard / Firebox
|
<12.11.3 | ||
|
HPE HP-UX <Secure Shell A.09.30.010
HPE / HP-UX
|
<Secure Shell A.09.30.010 |
Affected products
Known affected
54 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
IBM Security Verify Access <11.0.2
IBM / Security Verify Access
|
<11.0.2 | ||
|
Xerox FreeFlow Print Server 9
Xerox / FreeFlow Print Server
|
cpe:/a:xerox:freeflow_print_server:9
|
9 | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
IBM AIX 7.3
IBM / AIX
|
cpe:/o:ibm:aix:7.3
|
7.3 | |
|
Open Source OpenSSH <9.9p2
Open Source / OpenSSH
|
<9.9p2 | ||
|
Open Source OpenSSH 9.5p1-9.9p1
Open Source / OpenSSH
|
cpe:/a:openbsd:openssh:9.5p1
|
9.5p1-9.9p1 | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
Siemens SIMATIC S7 1500 CPU
Siemens / SIMATIC S7
|
cpe:/h:siemens:simatic_s7:1500_cpu
|
1500 CPU | |
|
Dell PowerScale OneFS OneFS
Dell / PowerScale OneFS
|
cpe:/a:dell:powerscale_onefs:onefs
|
OneFS | |
|
IBM AIX 7.2
IBM / AIX
|
cpe:/o:ibm:aix:7.2
|
7.2 | |
|
IBM Power Hardware Management Console
IBM
|
cpe:/a:ibm:hardware_management_console:-
|
— | |
|
IBM VIOS 3.1
IBM / VIOS
|
cpe:/a:ibm:vios:3.1
|
3.1 | |
|
IBM VIOS 4.1
IBM / VIOS
|
cpe:/a:ibm:vios:4.1
|
4.1 | |
|
Gentoo Linux
Gentoo
|
cpe:/o:gentoo:linux:-
|
— | |
|
NetApp Data ONTAP 9
NetApp / Data ONTAP
|
cpe:/a:netapp:data_ontap:9
|
9 | |
|
Dell Avamar
Dell
|
cpe:/a:dell:avamar:-
|
— | |
|
Dell PowerScale OneFS OneFS <9.10.1.3
Dell / PowerScale OneFS
|
OneFS <9.10.1.3 | ||
|
Dell PowerScale OneFS OneFS <9.11.0.1
Dell / PowerScale OneFS
|
OneFS <9.11.0.1 | ||
|
Debian Linux
Debian
|
cpe:/o:debian:debian_linux:-
|
— | |
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
NetApp AFF
NetApp
|
cpe:/h:netapp:aff:-
|
— | |
|
SUSE openSUSE
SUSE
|
cpe:/o:suse:opensuse:-
|
— | |
|
Fortinet FortiManager <7.4.7
Fortinet / FortiManager
|
<7.4.7 | ||
|
Fortinet FortiManager <7.2.11
Fortinet / FortiManager
|
<7.2.11 | ||
|
IBM Security Verify Access <10.0.9.1
IBM / Security Verify Access
|
<10.0.9.1 | ||
|
OpenBSD OpenBSD 7.5
OpenBSD / OpenBSD
|
cpe:/a:openbsd:openbsd:7.5
|
7.5 | |
|
NetApp ActiveIQ Unified Manager
NetApp
|
cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
FreeBSD Project FreeBSD OS
FreeBSD Project
|
cpe:/o:freebsd:freebsd:-
|
— | |
|
NetApp FAS
NetApp
|
cpe:/h:netapp:fas:-
|
— | |
|
Dell NetWorker
Dell / NetWorker
|
cpe:/a:dell:networker:virtual
|
— | |
|
OpenBSD OpenBSD 7.6
OpenBSD / OpenBSD
|
cpe:/a:openbsd:openbsd:7.6
|
7.6 | |
|
Fortinet FortiAnalyzer <7.6.3
Fortinet / FortiAnalyzer
|
<7.6.3 | ||
|
Fortinet FortiAnalyzer <7.4.7
Fortinet / FortiAnalyzer
|
<7.4.7 | ||
|
Fortinet FortiAnalyzer <7.2.11
Fortinet / FortiAnalyzer
|
<7.2.11 | ||
|
Fortinet FortiManager <7.6.3
Fortinet / FortiManager
|
<7.6.3 | ||
|
Dell integrated Dell Remote Access Controller <7.00.00.181
Dell / integrated Dell Remote Access Controller
|
<7.00.00.181 | ||
|
Dell integrated Dell Remote Access Controller <7.20.30.50
Dell / integrated Dell Remote Access Controller
|
<7.20.30.50 | ||
|
F5 BIG-IP
F5
|
cpe:/a:f5:big-ip:-
|
— | |
|
Dell PowerProtect Data Domain <7.13.1.40
Dell / PowerProtect Data Domain
|
<7.13.1.40 | ||
|
Dell PowerProtect Data Domain <7.10.1.70
Dell / PowerProtect Data Domain
|
<7.10.1.70 | ||
|
Securepoint UTM <14.0.2
Securepoint / UTM
|
<14.0.2 | ||
|
Dell PowerProtect Data Domain <8.3.1.10
Dell / PowerProtect Data Domain
|
<8.3.1.10 | ||
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
QNAP NAS QuTS hero <h5.2.4.3079 build 20250321
QNAP / NAS
|
QuTS hero <h5.2.4.3079 build 20250321 | ||
|
QNAP NAS QTS <5.2.4.3079 build 20250321
QNAP / NAS
|
QTS <5.2.4.3079 build 20250321 | ||
|
Meinberg LANTIME <7.08.023
Meinberg / LANTIME
|
<7.08.023 | ||
|
Dell PowerProtect Data Domain <8.4.0.0
Dell / PowerProtect Data Domain
|
<8.4.0.0 | ||
|
Ubuntu Linux
Ubuntu
|
cpe:/o:canonical:ubuntu_linux:-
|
— | |
|
Dell NetWorker <19.12.0.2
Dell / NetWorker
|
<19.12.0.2 | ||
|
Dell NetWorker <19.11.0.6
Dell / NetWorker
|
<19.11.0.6 | ||
|
WatchGuard Firebox <12.11.3
WatchGuard / Firebox
|
<12.11.3 | ||
|
HPE HP-UX <Secure Shell A.09.30.010
HPE / HP-UX
|
<Secure Shell A.09.30.010 |
References
53 references
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "OpenSSH ist eine Open Source Implementierung des Secure Shell Protokolls.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSH ausnutzen, um kryptografische Sicherheitsvorkehrungen zu umgehen und um einen Denial of Service Zustand herbeizuf\u00fchren.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-0394 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0394.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-0394 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0394"
},
{
"category": "external",
"summary": "Qualys Security Advisory vom 2025-02-18",
"url": "https://www.qualys.com/2025/02/18/openssh-mitm-dos.txt"
},
{
"category": "external",
"summary": "Qualys Blog vom 2025-02-18",
"url": "https://blog.qualys.com/vulnerabilities-threat-research/2025/02/18/qualys-tru-discovers-two-vulnerabilities-in-openssh-cve-2025-26465-cve-2025-26466"
},
{
"category": "external",
"summary": "OpenSSH Release Notes vom 2025-02-18",
"url": "https://www.openssh.com/releasenotes.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DSA-5868 vom 2025-02-18",
"url": "https://lists.debian.org/debian-security-announce/2025/msg00030.html"
},
{
"category": "external",
"summary": "Debian Security Advisory DLA-4057 vom 2025-02-18",
"url": "https://lists.debian.org/debian-lts-announce/2025/02/msg00020.html"
},
{
"category": "external",
"summary": "OpenBSD Errata 7.5",
"url": "https://www.openbsd.org/errata75.html"
},
{
"category": "external",
"summary": "OpenBSD Errata 7.6",
"url": "https://www.openbsd.org/errata76.html"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2025-62F6CB2785 vom 2025-02-18",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2025-62f6cb2785"
},
{
"category": "external",
"summary": "Gentoo Linux Security Advisory GLSA-202502-01 vom 2025-02-19",
"url": "https://security.gentoo.org/glsa/202502-01"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7270-1 vom 2025-02-18",
"url": "https://ubuntu.com/security/notices/USN-7270-1"
},
{
"category": "external",
"summary": "Ubuntu Security Notice USN-7270-2 vom 2025-02-18",
"url": "https://ubuntu.com/security/notices/USN-7270-2"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:0585-1 vom 2025-02-18",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-February/020372.html"
},
{
"category": "external",
"summary": "openSUSE Security Update OPENSUSE-SU-2025:14820-1 vom 2025-02-19",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/N26B32FQ4LFRH3U2SONNEYKLATWGNDP4/"
},
{
"category": "external",
"summary": "FreeBSD Security Advisory FREEBSD-SA-25:05.OPENSSH vom 2025-02-21",
"url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-25:05.openssh.asc"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:0605-1 vom 2025-02-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-February/020381.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:0605-1 vom 2025-02-21",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/GGMBNUMHNWAKKPCVKBQBXE7C4WSYOBAY/"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:0659-1 vom 2025-02-24",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-February/020414.html"
},
{
"category": "external",
"summary": "Redteam Pentesting Advisory RT-SA-2016-004 vom 2025-02-26",
"url": "https://wiki.securepoint.de/UTM/Changelog"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:0744-1 vom 2025-02-28",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-February/020457.html"
},
{
"category": "external",
"summary": "NetApp Security Advisory NTAP-20250228-0003 vom 2025-02-28",
"url": "https://security.netapp.com/advisory/ntap-20250228-0003/"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS-2025-2769 vom 2025-03-07",
"url": "https://alas.aws.amazon.com/AL2/ALAS-2025-2769.html"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7186519 vom 2025-03-17",
"url": "https://www.ibm.com/support/pages/node/7186519"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2025-145 vom 2025-04-08",
"url": "https://www.dell.com/support/kbdoc/de-de/000299624/dsa-2025-145-security-update-for-dell-idrac9-vulnerability"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:3837 vom 2025-04-14",
"url": "https://access.redhat.com/errata/RHSA-2025:3837"
},
{
"category": "external",
"summary": "F5 Security Advisory K000150879 vom 2025-04-16",
"url": "https://my.f5.com/manage/s/article/K000150879"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:6993 vom 2025-05-13",
"url": "https://access.redhat.com/errata/RHSA-2025:6993"
},
{
"category": "external",
"summary": "FortiGuard Labs PSIRT Advisory FG-IR-25-122 vom 2025-05-13",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-122"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:8274 vom 2025-05-29",
"url": "https://rhn.redhat.com/errata/RHSA-2025:8274.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:8277 vom 2025-05-28",
"url": "https://access.redhat.com/errata/RHSA-2025:8277"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:8278 vom 2025-05-29",
"url": "https://rhn.redhat.com/errata/RHSA-2025:8278.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:8278 vom 2025-05-28",
"url": "https://access.redhat.com/errata/RHSA-2025:8278"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2025-213 vom 2025-05-30",
"url": "https://www.dell.com/support/kbdoc/de-de/000326299/dsa-2025-213-security-update-for-dell-avamar-dell-networker-virtual-edition-nve-and-dell-powerprotect-dp-series-appliance-dell-integrated-data-protection-appliance-idpa-multiple-third-party-vulnerabilities"
},
{
"category": "external",
"summary": "XEROX Security Advisory XRX25-012 vom 2025-06-02",
"url": "https://security.business.xerox.com/wp-content/uploads/2025/06/Xerox-Security-Bulletin-XRX25-012-for-Xerox-FreeFlow-Print-Server-v9.pdf"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20226-1 vom 2025-06-04",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021099.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2025:20160-1 vom 2025-06-04",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2025-June/021190.html"
},
{
"category": "external",
"summary": "QNAP Security Advisory QSA-25-14 vom 2025-06-06",
"url": "https://www.qnap.com/de-de/security-advisory/QSA-25-14"
},
{
"category": "external",
"summary": "Siemens Security Advisory SSA-082556 vom 2025-06-10",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html"
},
{
"category": "external",
"summary": "NetApp Security Advisory NTAP-20250228-0002 vom 2025-06-27",
"url": "https://security.netapp.com/advisory/NTAP-20250228-0002"
},
{
"category": "external",
"summary": "WatchGuard Security Advisory WGSA-2025-00009 vom 2025-07-10",
"url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00009"
},
{
"category": "external",
"summary": "HPE Security Bulletin vom 2025-07-23",
"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbux04903en_us\u0026docLocale=en_US"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2025-262 vom 2025-08-01",
"url": "https://www.dell.com/support/kbdoc/000337955"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2025-272 vom 2025-08-06",
"url": "https://www.dell.com/support/kbdoc/000353080"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2025-339 vom 2025-09-01",
"url": "https://www.dell.com/support/kbdoc/de-de/000362542/dsa-2025-339-security-update-for-dell-avamar-data-store-gen5a-multiple-third-party-component-vulnerabilities"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2025:16823 vom 2025-09-26",
"url": "https://access.redhat.com/errata/RHSA-2025:16823"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2025-16823 vom 2025-09-26",
"url": "https://linux.oracle.com/errata/ELSA-2025-16823.html"
},
{
"category": "external",
"summary": "Dell Security Update vom 2025-10-02",
"url": "https://www.dell.com/support/kbdoc/000376224"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2025:6993 vom 2025-10-04",
"url": "https://errata.build.resf.org/RLSA-2025:6993"
},
{
"category": "external",
"summary": "Dell Security Advisory DSA-2025-166 vom 2025-10-14",
"url": "https://www.dell.com/support/kbdoc/de-de/000363693/dsa-2025-166-security-update-for-dell-powerscale-onefs-multiple-third-party-component-vulnerabilities"
},
{
"category": "external",
"summary": "Meinberg Security Advisory MBGSA-2025.03 vom 2025-11-27",
"url": "https://www.meinberg.de/german/news/meinberg-security-advisory-mbgsa-2025-03-lantime-firmware-v7-08-023.htm"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7256856 vom 2026-01-13",
"url": "https://www.ibm.com/support/pages/node/7256856"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7259488 vom 2026-02-03",
"url": "https://www.ibm.com/support/pages/node/7259488"
}
],
"source_lang": "en-US",
"title": "OpenSSH: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-02-02T23:00:00.000+00:00",
"generator": {
"date": "2026-02-03T09:34:34.303+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.5.0"
}
},
"id": "WID-SEC-W-2025-0394",
"initial_release_date": "2025-02-17T23:00:00.000+00:00",
"revision_history": [
{
"date": "2025-02-17T23:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2025-02-18T23:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Fedora, Gentoo, Ubuntu und SUSE aufgenommen"
},
{
"date": "2025-02-19T23:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates von openSUSE aufgenommen"
},
{
"date": "2025-02-20T23:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von FreeBSD und SUSE aufgenommen"
},
{
"date": "2025-02-23T23:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-02-26T23:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von RedTeam Pentesting aufgenommen"
},
{
"date": "2025-03-02T23:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von SUSE und NetApp aufgenommen"
},
{
"date": "2025-03-09T23:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2025-03-17T23:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2025-04-08T22:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2025-04-13T22:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2025-04-16T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von F5 aufgenommen"
},
{
"date": "2025-05-12T22:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2025-05-13T22:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von Fortinet aufgenommen"
},
{
"date": "2025-05-29T22:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2025-06-02T22:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von XEROX aufgenommen"
},
{
"date": "2025-06-03T22:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2025-06-09T22:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von QNAP aufgenommen"
},
{
"date": "2025-06-10T22:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates von Siemens aufgenommen"
},
{
"date": "2025-06-26T22:00:00.000+00:00",
"number": "20",
"summary": "Neue Updates von NetApp aufgenommen"
},
{
"date": "2025-07-10T22:00:00.000+00:00",
"number": "21",
"summary": "Neue Updates von WatchGuard aufgenommen"
},
{
"date": "2025-07-23T22:00:00.000+00:00",
"number": "22",
"summary": "Neue Updates von HP aufgenommen"
},
{
"date": "2025-07-31T22:00:00.000+00:00",
"number": "23",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2025-08-05T22:00:00.000+00:00",
"number": "24",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2025-08-31T22:00:00.000+00:00",
"number": "25",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2025-09-25T22:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2025-09-28T22:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2025-10-01T22:00:00.000+00:00",
"number": "28",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2025-10-05T22:00:00.000+00:00",
"number": "29",
"summary": "Neue Updates von Rocky Enterprise Software Foundation aufgenommen"
},
{
"date": "2025-10-13T22:00:00.000+00:00",
"number": "30",
"summary": "Neue Updates von Dell aufgenommen"
},
{
"date": "2025-11-27T23:00:00.000+00:00",
"number": "31",
"summary": "Neue Updates von Meinberg aufgenommen"
},
{
"date": "2026-01-12T23:00:00.000+00:00",
"number": "32",
"summary": "Neue Updates von IBM aufgenommen"
},
{
"date": "2026-02-02T23:00:00.000+00:00",
"number": "33",
"summary": "Neue Updates von IBM aufgenommen"
}
],
"status": "final",
"version": "33"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Debian Linux",
"product": {
"name": "Debian Linux",
"product_id": "2951",
"product_identification_helper": {
"cpe": "cpe:/o:debian:debian_linux:-"
}
}
}
],
"category": "vendor",
"name": "Debian"
},
{
"branches": [
{
"category": "product_name",
"name": "Dell Avamar",
"product": {
"name": "Dell Avamar",
"product_id": "T039664",
"product_identification_helper": {
"cpe": "cpe:/a:dell:avamar:-"
}
}
},
{
"branches": [
{
"category": "product_name",
"name": "Dell NetWorker",
"product": {
"name": "Dell NetWorker",
"product_id": "T034583",
"product_identification_helper": {
"cpe": "cpe:/a:dell:networker:virtual"
}
}
},
{
"category": "product_version_range",
"name": "\u003c19.12.0.2",
"product": {
"name": "Dell NetWorker \u003c19.12.0.2",
"product_id": "T045790"
}
},
{
"category": "product_version",
"name": "19.12.0.2",
"product": {
"name": "Dell NetWorker 19.12.0.2",
"product_id": "T045790-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:networker:19.12.0.2"
}
}
},
{
"category": "product_version_range",
"name": "\u003c19.11.0.6",
"product": {
"name": "Dell NetWorker \u003c19.11.0.6",
"product_id": "T045791"
}
},
{
"category": "product_version",
"name": "19.11.0.6",
"product": {
"name": "Dell NetWorker 19.11.0.6",
"product_id": "T045791-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:networker:19.11.0.6"
}
}
}
],
"category": "product_name",
"name": "NetWorker"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c8.4.0.0",
"product": {
"name": "Dell PowerProtect Data Domain \u003c8.4.0.0",
"product_id": "T045879"
}
},
{
"category": "product_version",
"name": "8.4.0.0",
"product": {
"name": "Dell PowerProtect Data Domain 8.4.0.0",
"product_id": "T045879-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:powerprotect_data_domain:8.4.0.0"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.10.1.70",
"product": {
"name": "Dell PowerProtect Data Domain \u003c7.10.1.70",
"product_id": "T045881"
}
},
{
"category": "product_version",
"name": "7.10.1.70",
"product": {
"name": "Dell PowerProtect Data Domain 7.10.1.70",
"product_id": "T045881-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:powerprotect_data_domain:7.10.1.70"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.13.1.40",
"product": {
"name": "Dell PowerProtect Data Domain \u003c7.13.1.40",
"product_id": "T047343"
}
},
{
"category": "product_version",
"name": "7.13.1.40",
"product": {
"name": "Dell PowerProtect Data Domain 7.13.1.40",
"product_id": "T047343-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:powerprotect_data_domain:7.13.1.40"
}
}
},
{
"category": "product_version_range",
"name": "\u003c8.3.1.10",
"product": {
"name": "Dell PowerProtect Data Domain \u003c8.3.1.10",
"product_id": "T047344"
}
},
{
"category": "product_version",
"name": "8.3.1.10",
"product": {
"name": "Dell PowerProtect Data Domain 8.3.1.10",
"product_id": "T047344-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:powerprotect_data_domain:8.3.1.10"
}
}
}
],
"category": "product_name",
"name": "PowerProtect Data Domain"
},
{
"branches": [
{
"category": "product_version",
"name": "OneFS",
"product": {
"name": "Dell PowerScale OneFS OneFS",
"product_id": "T034610",
"product_identification_helper": {
"cpe": "cpe:/a:dell:powerscale_onefs:onefs"
}
}
},
{
"category": "product_version_range",
"name": "OneFS \u003c9.10.1.3",
"product": {
"name": "Dell PowerScale OneFS OneFS \u003c9.10.1.3",
"product_id": "T045897"
}
},
{
"category": "product_version",
"name": "OneFS 9.10.1.3",
"product": {
"name": "Dell PowerScale OneFS OneFS 9.10.1.3",
"product_id": "T045897-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:powerscale_onefs:onefs__9.10.1.3"
}
}
},
{
"category": "product_version_range",
"name": "OneFS \u003c9.11.0.1",
"product": {
"name": "Dell PowerScale OneFS OneFS \u003c9.11.0.1",
"product_id": "T045898"
}
},
{
"category": "product_version",
"name": "OneFS 9.11.0.1",
"product": {
"name": "Dell PowerScale OneFS OneFS 9.11.0.1",
"product_id": "T045898-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:dell:powerscale_onefs:onefs__9.11.0.1"
}
}
}
],
"category": "product_name",
"name": "PowerScale OneFS"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c7.00.00.181",
"product": {
"name": "Dell integrated Dell Remote Access Controller \u003c7.00.00.181",
"product_id": "T042656"
}
},
{
"category": "product_version",
"name": "7.00.00.181",
"product": {
"name": "Dell integrated Dell Remote Access Controller 7.00.00.181",
"product_id": "T042656-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:dell:idrac:7.00.00.181"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.20.30.50",
"product": {
"name": "Dell integrated Dell Remote Access Controller \u003c7.20.30.50",
"product_id": "T042657"
}
},
{
"category": "product_version",
"name": "7.20.30.50",
"product": {
"name": "Dell integrated Dell Remote Access Controller 7.20.30.50",
"product_id": "T042657-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:dell:idrac:7.20.30.50"
}
}
}
],
"category": "product_name",
"name": "integrated Dell Remote Access Controller"
}
],
"category": "vendor",
"name": "Dell"
},
{
"branches": [
{
"category": "product_name",
"name": "F5 BIG-IP",
"product": {
"name": "F5 BIG-IP",
"product_id": "T001663",
"product_identification_helper": {
"cpe": "cpe:/a:f5:big-ip:-"
}
}
}
],
"category": "vendor",
"name": "F5"
},
{
"branches": [
{
"category": "product_name",
"name": "Fedora Linux",
"product": {
"name": "Fedora Linux",
"product_id": "74185",
"product_identification_helper": {
"cpe": "cpe:/o:fedoraproject:fedora:-"
}
}
}
],
"category": "vendor",
"name": "Fedora"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c7.6.3",
"product": {
"name": "Fortinet FortiAnalyzer \u003c7.6.3",
"product_id": "T043586"
}
},
{
"category": "product_version",
"name": "7.6.3",
"product": {
"name": "Fortinet FortiAnalyzer 7.6.3",
"product_id": "T043586-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:fortinet:fortianalyzer:7.6.3"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.4.7",
"product": {
"name": "Fortinet FortiAnalyzer \u003c7.4.7",
"product_id": "T043587"
}
},
{
"category": "product_version",
"name": "7.4.7",
"product": {
"name": "Fortinet FortiAnalyzer 7.4.7",
"product_id": "T043587-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:fortinet:fortianalyzer:7.4.7"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.2.11",
"product": {
"name": "Fortinet FortiAnalyzer \u003c7.2.11",
"product_id": "T043588"
}
},
{
"category": "product_version",
"name": "7.2.11",
"product": {
"name": "Fortinet FortiAnalyzer 7.2.11",
"product_id": "T043588-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:fortinet:fortianalyzer:7.2.11"
}
}
}
],
"category": "product_name",
"name": "FortiAnalyzer"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c7.6.3",
"product": {
"name": "Fortinet FortiManager \u003c7.6.3",
"product_id": "T043589"
}
},
{
"category": "product_version",
"name": "7.6.3",
"product": {
"name": "Fortinet FortiManager 7.6.3",
"product_id": "T043589-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:fortinet:fortimanager:7.6.3"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.4.7",
"product": {
"name": "Fortinet FortiManager \u003c7.4.7",
"product_id": "T043590"
}
},
{
"category": "product_version",
"name": "7.4.7",
"product": {
"name": "Fortinet FortiManager 7.4.7",
"product_id": "T043590-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:fortinet:fortimanager:7.4.7"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.2.11",
"product": {
"name": "Fortinet FortiManager \u003c7.2.11",
"product_id": "T043591"
}
},
{
"category": "product_version",
"name": "7.2.11",
"product": {
"name": "Fortinet FortiManager 7.2.11",
"product_id": "T043591-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:fortinet:fortimanager:7.2.11"
}
}
}
],
"category": "product_name",
"name": "FortiManager"
}
],
"category": "vendor",
"name": "Fortinet"
},
{
"branches": [
{
"category": "product_name",
"name": "FreeBSD Project FreeBSD OS",
"product": {
"name": "FreeBSD Project FreeBSD OS",
"product_id": "4035",
"product_identification_helper": {
"cpe": "cpe:/o:freebsd:freebsd:-"
}
}
}
],
"category": "vendor",
"name": "FreeBSD Project"
},
{
"branches": [
{
"category": "product_name",
"name": "Gentoo Linux",
"product": {
"name": "Gentoo Linux",
"product_id": "T012167",
"product_identification_helper": {
"cpe": "cpe:/o:gentoo:linux:-"
}
}
}
],
"category": "vendor",
"name": "Gentoo"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cSecure Shell A.09.30.010",
"product": {
"name": "HPE HP-UX \u003cSecure Shell A.09.30.010",
"product_id": "T045630"
}
},
{
"category": "product_version",
"name": "Secure Shell A.09.30.010",
"product": {
"name": "HPE HP-UX Secure Shell A.09.30.010",
"product_id": "T045630-fixed",
"product_identification_helper": {
"cpe": "cpe:/o:hp:hp-ux:secure_shell_a.09.30.010"
}
}
}
],
"category": "product_name",
"name": "HP-UX"
}
],
"category": "vendor",
"name": "HPE"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "7.3",
"product": {
"name": "IBM AIX 7.3",
"product_id": "1139691",
"product_identification_helper": {
"cpe": "cpe:/o:ibm:aix:7.3"
}
}
},
{
"category": "product_version",
"name": "7.2",
"product": {
"name": "IBM AIX 7.2",
"product_id": "434967",
"product_identification_helper": {
"cpe": "cpe:/o:ibm:aix:7.2"
}
}
}
],
"category": "product_name",
"name": "AIX"
},
{
"category": "product_name",
"name": "IBM Power Hardware Management Console",
"product": {
"name": "IBM Power Hardware Management Console",
"product_id": "5114",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:hardware_management_console:-"
}
}
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c10.0.9.1",
"product": {
"name": "IBM Security Verify Access \u003c10.0.9.1",
"product_id": "T049459"
}
},
{
"category": "product_version",
"name": "10.0.9.1",
"product": {
"name": "IBM Security Verify Access 10.0.9.1",
"product_id": "T049459-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:security_verify_access:v10.0.9.1"
}
}
},
{
"category": "product_version_range",
"name": "\u003c11.0.2",
"product": {
"name": "IBM Security Verify Access \u003c11.0.2",
"product_id": "T049460"
}
},
{
"category": "product_version",
"name": "11.0.2",
"product": {
"name": "IBM Security Verify Access 11.0.2",
"product_id": "T049460-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:security_verify_access:11.0.2"
}
}
}
],
"category": "product_name",
"name": "Security Verify Access"
},
{
"branches": [
{
"category": "product_version",
"name": "3.1",
"product": {
"name": "IBM VIOS 3.1",
"product_id": "1039165",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:vios:3.1"
}
}
},
{
"category": "product_version",
"name": "4.1",
"product": {
"name": "IBM VIOS 4.1",
"product_id": "1522854",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:vios:4.1"
}
}
}
],
"category": "product_name",
"name": "VIOS"
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c7.08.023",
"product": {
"name": "Meinberg LANTIME \u003c7.08.023",
"product_id": "T048943"
}
},
{
"category": "product_version",
"name": "7.08.023",
"product": {
"name": "Meinberg LANTIME 7.08.023",
"product_id": "T048943-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:meinberg:lantime:7.08.023"
}
}
}
],
"category": "product_name",
"name": "LANTIME"
}
],
"category": "vendor",
"name": "Meinberg"
},
{
"branches": [
{
"category": "product_name",
"name": "NetApp AFF",
"product": {
"name": "NetApp AFF",
"product_id": "T020536",
"product_identification_helper": {
"cpe": "cpe:/h:netapp:aff:-"
}
}
},
{
"category": "product_name",
"name": "NetApp ActiveIQ Unified Manager",
"product": {
"name": "NetApp ActiveIQ Unified Manager",
"product_id": "T025152",
"product_identification_helper": {
"cpe": "cpe:/a:netapp:active_iq_unified_manager:for_vmware_vsphere"
}
}
},
{
"branches": [
{
"category": "product_version",
"name": "9",
"product": {
"name": "NetApp Data ONTAP 9",
"product_id": "T039981",
"product_identification_helper": {
"cpe": "cpe:/a:netapp:data_ontap:9"
}
}
}
],
"category": "product_name",
"name": "Data ONTAP"
},
{
"category": "product_name",
"name": "NetApp FAS",
"product": {
"name": "NetApp FAS",
"product_id": "T011540",
"product_identification_helper": {
"cpe": "cpe:/h:netapp:fas:-"
}
}
}
],
"category": "vendor",
"name": "NetApp"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "6.8p1-9.9p1",
"product": {
"name": "Open Source OpenSSH 6.8p1-9.9p1",
"product_id": "T041261",
"product_identification_helper": {
"cpe": "cpe:/a:openbsd:openssh:6.8p1"
}
}
},
{
"category": "product_version",
"name": "9.5p1-9.9p1",
"product": {
"name": "Open Source OpenSSH 9.5p1-9.9p1",
"product_id": "T041262",
"product_identification_helper": {
"cpe": "cpe:/a:openbsd:openssh:9.5p1"
}
}
},
{
"category": "product_version_range",
"name": "\u003c9.9p2",
"product": {
"name": "Open Source OpenSSH \u003c9.9p2",
"product_id": "T041263"
}
},
{
"category": "product_version",
"name": "9.9p2",
"product": {
"name": "Open Source OpenSSH 9.9p2",
"product_id": "T041263-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:openbsd:openssh:9.9p2"
}
}
}
],
"category": "product_name",
"name": "OpenSSH"
}
],
"category": "vendor",
"name": "Open Source"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "7.5",
"product": {
"name": "OpenBSD OpenBSD 7.5",
"product_id": "T033898",
"product_identification_helper": {
"cpe": "cpe:/a:openbsd:openbsd:7.5"
}
}
},
{
"category": "product_version",
"name": "7.6",
"product": {
"name": "OpenBSD OpenBSD 7.6",
"product_id": "T038347",
"product_identification_helper": {
"cpe": "cpe:/a:openbsd:openbsd:7.6"
}
}
}
],
"category": "product_name",
"name": "OpenBSD"
}
],
"category": "vendor",
"name": "OpenBSD"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "QTS \u003c5.2.4.3079 build 20250321",
"product": {
"name": "QNAP NAS QTS \u003c5.2.4.3079 build 20250321",
"product_id": "T044422"
}
},
{
"category": "product_version",
"name": "QTS 5.2.4.3079 build 20250321",
"product": {
"name": "QNAP NAS QTS 5.2.4.3079 build 20250321",
"product_id": "T044422-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:qnap:nas:qts__5.2.4.3079_build_20250321"
}
}
},
{
"category": "product_version_range",
"name": "QuTS hero \u003ch5.2.4.3079 build 20250321",
"product": {
"name": "QNAP NAS QuTS hero \u003ch5.2.4.3079 build 20250321",
"product_id": "T044423"
}
},
{
"category": "product_version",
"name": "QuTS hero h5.2.4.3079 build 20250321",
"product": {
"name": "QNAP NAS QuTS hero h5.2.4.3079 build 20250321",
"product_id": "T044423-fixed",
"product_identification_helper": {
"cpe": "cpe:/h:qnap:nas:quts_hero__h5.2.4.3079_build_20250321"
}
}
}
],
"category": "product_name",
"name": "NAS"
}
],
"category": "vendor",
"name": "QNAP"
},
{
"branches": [
{
"category": "product_name",
"name": "RESF Rocky Linux",
"product": {
"name": "RESF Rocky Linux",
"product_id": "T032255",
"product_identification_helper": {
"cpe": "cpe:/o:resf:rocky_linux:-"
}
}
}
],
"category": "vendor",
"name": "RESF"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
},
{
"category": "product_name",
"name": "SUSE openSUSE",
"product": {
"name": "SUSE openSUSE",
"product_id": "T027843",
"product_identification_helper": {
"cpe": "cpe:/o:suse:opensuse:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c14.0.2",
"product": {
"name": "Securepoint UTM \u003c14.0.2",
"product_id": "T041442"
}
},
{
"category": "product_version",
"name": "14.0.2",
"product": {
"name": "Securepoint UTM 14.0.2",
"product_id": "T041442-fixed",
"product_identification_helper": {
"cpe": "cpe:/o:securepoint:unified_threat_management:14.0.2"
}
}
}
],
"category": "product_name",
"name": "UTM"
}
],
"category": "vendor",
"name": "Securepoint"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "1500 CPU",
"product": {
"name": "Siemens SIMATIC S7 1500 CPU",
"product_id": "T025776",
"product_identification_helper": {
"cpe": "cpe:/h:siemens:simatic_s7:1500_cpu"
}
}
}
],
"category": "product_name",
"name": "SIMATIC S7"
}
],
"category": "vendor",
"name": "Siemens"
},
{
"branches": [
{
"category": "product_name",
"name": "Ubuntu Linux",
"product": {
"name": "Ubuntu Linux",
"product_id": "T000126",
"product_identification_helper": {
"cpe": "cpe:/o:canonical:ubuntu_linux:-"
}
}
}
],
"category": "vendor",
"name": "Ubuntu"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c12.11.3",
"product": {
"name": "WatchGuard Firebox \u003c12.11.3",
"product_id": "T045310"
}
},
{
"category": "product_version",
"name": "12.11.3",
"product": {
"name": "WatchGuard Firebox 12.11.3",
"product_id": "T045310-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:watchguard:firebox:12.11.3"
}
}
}
],
"category": "product_name",
"name": "Firebox"
}
],
"category": "vendor",
"name": "WatchGuard"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "9",
"product": {
"name": "Xerox FreeFlow Print Server 9",
"product_id": "T002977",
"product_identification_helper": {
"cpe": "cpe:/a:xerox:freeflow_print_server:9"
}
}
}
],
"category": "product_name",
"name": "FreeFlow Print Server"
}
],
"category": "vendor",
"name": "Xerox"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-26465",
"product_status": {
"known_affected": [
"T049460",
"T002977",
"T004914",
"1139691",
"T041263",
"T041262",
"T041261",
"398363",
"T025776",
"T034610",
"434967",
"5114",
"1039165",
"1522854",
"T012167",
"T039981",
"T039664",
"T045897",
"T045898",
"2951",
"T002207",
"T020536",
"T027843",
"T043590",
"T043591",
"T049459",
"T033898",
"T025152",
"67646",
"4035",
"T011540",
"T034583",
"T038347",
"T043586",
"T043587",
"T043588",
"T043589",
"T042656",
"T042657",
"T001663",
"T047343",
"T045881",
"T041442",
"T047344",
"T032255",
"74185",
"T044423",
"T044422",
"T048943",
"T045879",
"T000126",
"T045790",
"T045791",
"T045310",
"T045630"
]
},
"release_date": "2025-02-17T23:00:00.000+00:00",
"title": "CVE-2025-26465"
},
{
"cve": "CVE-2025-26466",
"product_status": {
"known_affected": [
"T049460",
"T002977",
"T004914",
"1139691",
"T041263",
"T041262",
"398363",
"T025776",
"T034610",
"434967",
"5114",
"1039165",
"1522854",
"T012167",
"T039981",
"T039664",
"T045897",
"T045898",
"2951",
"T002207",
"T020536",
"T027843",
"T043590",
"T043591",
"T049459",
"T033898",
"T025152",
"67646",
"4035",
"T011540",
"T034583",
"T038347",
"T043586",
"T043587",
"T043588",
"T043589",
"T042656",
"T042657",
"T001663",
"T047343",
"T045881",
"T041442",
"T047344",
"T032255",
"74185",
"T044423",
"T044422",
"T048943",
"T045879",
"T000126",
"T045790",
"T045791",
"T045310",
"T045630"
]
},
"release_date": "2025-02-17T23:00:00.000+00:00",
"title": "CVE-2025-26466"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…