CVE-2024-2873

9.1CRITICAL

A vulnerability was found in wolfSSH's server-side state machine before versions 1.4.17. A malicious client could create channels without first performing user authentication, resulting in unauthorize

Published: 3/25/2024Updated: 12/5/2025
View on NVDView on MITRE

Description

A vulnerability was found in wolfSSH's server-side state machine before versions 1.4.17. A malicious client could create channels without first performing user authentication, resulting in unauthorized access.

AI AnalysisPowered by AI

Affected Products

wolfsshwolfssh

References