NewsSiemens ProductCERT

SSA-446545 V1.0: Impact of RegreSSHion (CVE-2024-6387) in Siemens Industrial Products

An OpenSSH vulnerability, known as regreSSHion, affects multiple Siemens industrial products. This security regression vulnerability consists in a race condition which may allow an unauthenticated remote attacker to achieve remote code execution with high impact on the affected system. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.

CVE-2024-6387Oracle Communications: Mehrere Schwachstellen
CVE-2024-6387Security update for openssh
CVE-2024-6387OpenSSH vulnerability
CVE-2024-6387regreSSHion: unauthenticated RCE in OpenSSH sshd (CVE-2024-6387)
CVE-2024-6387Multiple Vulnerabilities in Apple Products
CVE-2024-6387Siemens ProductCERT Advisory SSA-082556
CVE-2024-6387A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an u…
CVE-2024-6387Siemens ProductCERT Advisory SSA-446545
CVE-2024-6387High-Severity Vulnerability Affecting OpenSSH
CVE-2024-6387Debian openssh: security update
CVE-2024-6387OpenSSH: Race Condition
CVE-2024-6387OpenSSH: Race Condition

Affected vendors and products

Almalinux Almalinux
Amazon
Apple Apple macOS
Arista Networks Arista EOS
Canonical Canonical Ubuntu Linux
Debian Debian Linux
Debian Openssh
FreeBSD FreeBSD
NetApp 500f Firmware
NetApp 8300 Firmware
NetApp 8700 Firmware
NetApp A150 Firmware

Other advisories

Not ratedosv:CVE-2024-6387Openssh: regresshion - race condition in ssh allows rce/dos
HighCVE-2024-6387regreSSHion: unauthenticated RCE in OpenSSH sshd (CVE-2024-6387)

Source: https://cert-portal.siemens.com/productcert/html/ssa-446545.html

Linked advisories

Affected vendors and products

More on RegreSSHion

Other advisories