Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 7 products
@DerekUrizar Urizar, I'm going to make it easy for you, with this you can access it. Target: guatemalavisible[.]net IP: 107.180.40.138 CVE: CVE-2025-67896 CVE-2024-3566 CVE-2023-38408 CVE-2022-37454 CVE-2021-41617 CVE-2020-15778 CVE-2019-16905 CVE-2017-8923 CVE-2013-2220 CVE-2008-3844
Post summary
The message lists a series of CVE identifiers and a target but provides no additional technical, exploit, or mitigation details.
7 of 7 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | netapp | cloud_backup | - | - | - |
| App | netapp | steelstore_cloud_integrated_storage | - | - | - |
| App | openbsd | openssh | - | - | - |
| HW | siemens | scalance_x204rna | - | - | - |
| HW | siemens | scalance_x204rna_ecc | - | - | - |
| OS | siemens | scalance_x204rna_ecc_firmware | - | - | - |
| OS | siemens | scalance_x204rna_firmware | - | - | - |