Read the docs
TI-2025-13628 Aliases CVE-2025-14942GHSA-5r65-89wp-6mxr

Authentication bypass in wolfSSL wolfSSH

Priority MEDIUM 43CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-287.

Summary

wolfSSH’s key exchange state machine can be manipulated to leak the client’s password in the clear, trick the client to send a bogus signature, or trick the client into skipping user authentication. This affects client applications with wolfSSH version 1.4.21 and earlier. Users of wolfSSH must update or apply the fix patch and it’s recommended to update credentials used. This fix is also recommended for wolfSSH server applications. While there aren’t any specific attacks on server applications, the same defect is present. Thanks to Aina Toky Rasoamanana of Valeo and Olivier Levillain of Telecom SudParis for the report.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00393 33rd percentileScored 2026-11-07
Fix Fixed wolfSSH (wolfSSL): 1.4.22

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
wolfSSLwolfSSHbefore 1.4.221.4.22Patch availableCNA
  • wolfSSH VendorwolfSSL Affected before 1.4.22 Fixed in 1.4.22 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:wolfssh:wolfssh:*:*:*:*:*:*:*:*before 1.4.22VulnerablewolfSSH
  • cpe:2.3:a:wolfssh:wolfssh:*:*:*:*:*:*:*:* Versions before 1.4.22 Vulnerable ·wolfSSH

Remediation

  • Fix · CNA wolfSSH (wolfSSL) Fixed in 1.4.22

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-14942
  2. 2026-10-03 Alias added: GHSA-5r65-89wp-6mxr

References

Other 1

  • TI-2024-00830 SEGV and out of bounds memory read from malicious packet CVSS 3.1CRITICAL 9.1
  • TI-2009-04246 Multiple stack-based buffer overflows in the CertDecoder::GetName function in src/asn.cpp… CVSS 2.0HIGH 7.5
  • TI-2022-18557 In wolfSSL before 5.5.1, malicious clients can cause a buffer overflow during a TLS 1.3… CVSS 3.1HIGH 7.5
  • TI-2025-10943 Potential DoS Vulnerability through Multiple KeyShareEntry with Same Group in TLS 1.3 ClientHello CVSS 4.0MEDIUM 6.3
  • TI-2017-09737 wolfSSL Bleichenbacher/ROBOT CVSS 3.0HIGH 7.5
  • TI-2019-08902 wolfSSL 4.0.0 has a Buffer Overflow in DoPreSharedKeys in tls13.c when a current identity… CVSS 3.1CRITICAL 9.8
See all 176 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences