Vendors / TeraTerm Project Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now TeraTerm Project records in CISA KEV No TeraTerm Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.93547 · Published 2023-12-18 · Partial fix · 0.40.2, 0.17.0 +2 CWE-354
Priority LOW 38
Untrusted search path vulnerability in the installer of Tera Term 4.94 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS 3.0 HIGH 7.8· Local · No auth · User interaction · EPSS 0.02029 · Published 2017-06-09 · No fix listed CWE-426
Priority LOW 23
Improper Handling of Length Parameter Inconsistency (CWE-130) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project.
CVSS 4.0 MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.0032 · Published 2026-07-17 · No fix listed CWE-130
Priority LOW 23
Unsigned to Signed Conversion Error (CWE-196) vulnerability exists in TTSSH2 plugin of Tera Term provided by TeraTerm Project.
CVSS 4.0 MEDIUM 5.1· Network · No auth · User interaction · EPSS 0.0032 · Published 2026-07-17 · No fix listed CWE-196
Open these records in search → All records by CVSS severity
0 1 3 0 0
THREATIST.IORead the docs