VDE-2024-043 — Welotec: Multiple products are vulnerable to regreSSHion

Summary

Products from the Edge Gateway Family are affected by recently published so called RegreSSHion vulnerability.

Details

Impact
The vulnerability can lead to unauthenticated remote code execution.

Mitigation
Disable SSH Access via CLI Command or Config Import locally or for a centrally managed device by changing the configuration in SMART EMSRefer to eG OS manual chapter 4.26 for further information

Remediation
Update egOS on affected products to version v1.5.4

Vulnerabilities 1

High 8.1

CVE-2024-6387 Public exploit EPSS 100%

Openssh: regresshion - race condition in ssh allows rce/dos

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine

Jul 1, 2024

Revision history

2024-08-22 #1
Initial revision.

References

VDE-2024-043: Welotec: Multiple products are vulnerable to regreSSHion - HTML
https://certvde.com/en/advisories/VDE-2024-043/
Vendor PSIRT
https://welotec.com
CERT@VDE Security Advisories for Welotec GmbH
https://certvde.com/en/advisories/vendor/welotec/