CVE-2021-27891 — Tectia Client vulnerability

3 documents3 sources
Severity
8.8HIGHNVD
EPSS
0.5%
top 33.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SSH Tectia ClientSSH Tectia Server
Timeline
PublishedMar 15
Latest updateMay 24

Description

SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation. ConnectSecure on Windows is affected.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶NVDssh/tectia_client< 6.4.19
▶NVDssh/tectia_server< 6.4.19

🔴Vulnerability Details

2
GHSA
GHSA-pc4j-6344-24x7: SSH Tectia Client and Server before 6↗2022-05-24
▶
CVEList
CVE-2021-27891: SSH Tectia Client and Server before 6↗2021-03-15
▶
CVE-2021-27891 — SSH Tectia Client vulnerability | cvebase