[WID-SEC-2024-1486] OpenSSH: Schwachstelle ermöglicht Codeausführung CVSS Base Score 8.1 (hoch) CVSS Temporal Score 7.7 (hoch) Remoteangriff ja Datum 30.06.2024 Stand UPDATE 13.02.2026 Mitigation ja Betroffene Systeme Betriebssystem Appliance CISCO Appliance Hardware Appliance Linux Sonstiges UNIX Produktbeschreibung OpenSSH ist eine Open Source Implementierung des Secure Shell Protokolls. Produkte UPDATE 12.02.2026 NetApp AFF Baseboard Management Controller NetApp ActiveIQ Unified Manager for VMware vSphere NetApp Data ONTAP 9 NetApp FAS Baseboard Management Controller UPDATE 10.06.2025 Siemens SIMATIC S7 1500 CPU UPDATE 09.06.2025 QNAP NAS QES 2.2.0 UPDATE 07.04.2025 Dell Avamar Gen5a <Hotfix 338868 UPDATE 01.04.2025 Moxa Router UPDATE 26.02.2025 IBM SAN Volume Controller IBM Storwize IBM FlashSystem UPDATE 16.02.2025 IBM Security Guardium 12.0 IBM Security Guardium 12.1 UPDATE 08.01.2025 Juniper JUNOS <24.2R2 Juniper JUNOS <24.2R2-EVO Juniper JUNOS <24.2R1-S2 Juniper JUNOS <24.4R1 Juniper JUNOS <24.2R1-S2-EVO Juniper JUNOS <24.4R1-EVO UPDATE 28.10.2024 HPE HP-UX sshd <A.09.30.007 UPDATE 11.09.2024 Fortinet FortiAuthenticator Fortinet FortiManager Fortinet FortiAnalyzer Fortinet FortiMail Fortinet FortiVoice Fortinet FortiWeb UPDATE 09.09.2024 Phoenix Contact FL MGUARD <8.9.3 Phoenix Contact FL MGUARD <10.4.1 UPDATE 01.09.2024 Dell PowerScale OneFS UPDATE 14.08.2024 Securepoint UTM <12.7.2 Dell integrated Dell Remote Access Controller <7.00.00.173 Dell integrated Dell Remote Access Controller <7.10.50.10 UPDATE 07.08.2024 IBM DB2 Cloud Pak UPDATE 01.08.2024 Ubuntu Linux Moxa Router EDR-8010 <3.12 Moxa Router EDR-G9010 <3.12 Moxa Router OnCell G4302-LTE4 <3.12 UPDATE 25.07.2024 WatchGuard Firebox <12.10.4 Update 1 UPDATE 24.07.2024 Huawei OceanStor Huawei iMaster NCE FabricInsight Huawei Router Huawei AC6805 Huawei AirEngine Huawei CloudEngine Huawei FusionServer Pro Huawei iMaster NCE-Campus Huawei iMaster NCE-CampusInsight Huawei iMaster NCE Fabric Huawei NetEngine UPDATE 23.07.2024 Meinberg LANTIME <V7.08.014 UPDATE 21.07.2024 Cisco Application Policy Infrastructure Controller UPDATE 16.07.2024 Cisco Nexus Dashboard Cisco Catalyst 9800 Series Wireless Controllers UPDATE 15.07.2024 Alcatel Lucent Enterprise AOS Alcatel Lucent Enterprise OmniSwitch Alcatel Lucent Enterprise Desk Phone UPDATE 14.07.2024 Aruba Switch CX OTRS OTRS SaaS platform <2024-07 Aruba EdgeConnect SD-WAN Orchestrator Aruba ArubaOS CX Switches UPDATE 10.07.2024 Cisco Secure Email Gateway Cisco Secure Web Appliance UPDATE 09.07.2024 IBM AIX 7.3 Cisco IOS XE IBM AIX 3.1 IBM AIX 4.1 IBM AIX 7.2 Cisco Unified Contact Center Express (UCCX) UPDATE 08.07.2024 Cisco Prime Infrastructure Arista EOS Cisco Smart Software Manager On-Prem HAProxy ALOHA <16.0.2 HAProxy ALOHA <15.5.12 HAProxy ALOHA <14.5.23 HAProxy HAProxy <2024-07-04 Cisco Evolved Programmable Network Manager Cisco IP Phone 9841 Cisco IP Phone 9851 UPDATE 07.07.2024 Cisco Identity Services Engine (ISE) Cisco Nexus 3000 Cisco Nexus 9000 Cisco Router ASR 5000 Cisco Expressway Cisco Aironet Access Point 1540 Cisco Firepower Management Center Cisco TelePresence Video Communication Server Cisco Meeting Server Cisco Aironet Access Point 1560 Cisco Catalyst 9100 Series Access Points Cisco Firepower Threat Defense Cisco Unified Communications Manager (CUCM) Cisco Unity Connection Cisco Emergency Responder Cisco ASA (Adaptive Security Appliance) Cisco FXOS Firepower Chassis Manager Cisco Wireless Access Point 6300 Series Embedded Cisco Aironet Access Point 802.11ac Wave2 Cisco Catalyst IW6300 Heavy Duty Series Access Points Cisco Catalyst IW9165 Heavy Duty Series Cisco Catalyst IW9165 Rugged Series Cisco Catalyst IW9167 Heavy Duty Series UPDATE 03.07.2024 Red Hat Enterprise Linux Securepoint UTM <12.6.5.1 UPDATE 02.07.2024 NetBSD Foundation NetBSD OS SUSE Linux QNAP NAS IGEL OS <12.4.2 IGEL OS <11.10.150 UPDATE 01.07.2024 Amazon Linux 2 Fedora Linux Oracle Linux WatchGuard Firebox 30.06.2024 Debian Linux FreeBSD Project FreeBSD OS Open Source OpenSSH <9.8p1 Open Source OpenSSH >=8.5p1 Angriff Angriff Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenSSH ausnutzen, um beliebigen Programmcode mit root Rechten auszuführen. CVE Informationen Versionshistorie Feedback zum Advisory geben