Summary
Several Helmholz products are vulnerable to a possible race condition vulnerability in OpenSSH named "regreSSHion".
Details
Impact
Possible full system compromise where an attacker can execute arbitrary code with the highest privileges.
Mitigation
Prevent all access to the sshd daemon listening on port 22.
Remediation
Update to latest firmware:
* 2.16.1 for myREX24 V2/myREX24 V2 virtual
* 8.2.0 for REX200/REX250
Vulnerabilities 1
-
High 8.1
Openssh: regresshion - race condition in ssh allows rce/dos
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate…
Revision history
-
#2
Fix: version space, added distribution
-
#1
initial revision
References
-
psirt@helmholz.de
https://www.helmholz.de
-
CERT@VDE Security Advisories
https://certvde.com/en/advisories/vendor/helmholz/
-
VDE-2024-044: Helmholz: Multiple products are vulnerable to regreSSHion - HTML
https://certvde.com/en/advisories/VDE-2024-044/