CVE-2024-2873 | BDVDB-2026-228563 Detail
wolfSSLwolfSSH
Description#
A vulnerability was found in wolfSSH's server-side state machine before versions 1.4.17. A malicious client could create channels without first performing user authentication, resulting in unauthorized access.
Impact#
CAPEC-115 Authentication Bypass
Weaknesses#
- CWE-287 Improper Authentication
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.