Vandyke

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Vandyke records in CISA KEV

No Vandyke vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Securecrt 2 records HIGH Absoluteftp 1 record MEDIUM Vshell 1 record HIGH

Records

4 records

TI-2023-26623 CVE-2023-48795 · GHSA-45x7-px36-x8w8

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…

HIGH 70

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.93547 Published 2023-12-18 Partial fix · 0.40.2, 0.17.0 +2 CWE-354

TI-2022-10880 CVE-2022-28054 · GHSA-fcq4-j7rv-crch

Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows…

HIGH 66

Improper sanitization of trigger action scripts in VanDyke Software VShell for Windows v4.6.2 allows attackers to execute arbitrary code via a crafted value.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.31895 Published 2022-05-02 No fix listed

TI-2011-04441 CVE-2011-5164 · GHSA-5ph8-53jc-j8qp

Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows…

MEDIUM 63

Stack-based buffer overflow in VanDyke Software AbsoluteFTP 1.9.6 through 2.2.10 allows remote FTP servers to execute arbitrary code via a crafted file name in a LIST command response.

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.28582 Published 2012-09-15 No fix listed CWE-119

TI-2020-10060 CVE-2020-12651 · GHSA-qqjx-v7vc-77w8

SecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer…

MEDIUM 52

SecureCRT before 8.7.2 allows remote attackers to execute arbitrary code via an Integer Overflow and a Buffer Overflow because a banner can trigger a line number to CSI functions that exceeds INT_MAX.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06603 Published 2020-05-15 No fix listed CWE-190

Open these records in search →

Critical	3
High	0
Medium	1
Low	0
No CVSS	0