7.5high
CVE-2001-1473Nuclei template
The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by…
Published 25 y ago · modified 4 mo ago · JSON
CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
6.3%
percentile 94%
Public exploits
0
none known · Nuclei check
Summary
The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session ID that matches the Session ID of the target, but which uses a public key pair that is weaker than the target's public key, which allows the attacker to compute the corresponding private key and use the target's Session ID with the compromised key pair to masquerade as the target.
Exploit prediction (EPSS)
6.27% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.
Exploits and detections
- Nuclei template Deprecated SSHv1 Protocol Detection · nuclei detection template
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Weakness
- CWE-310 Cryptographic Issues
References
- kb.cert.org /vuls/id/684820 · third-party-advisory, x_refsource_CERT-VN, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/6603 · vdb-entry, x_refsource_XF, x_transferred
Sources
- CVE List: CVE-2001-1473
- NVD: CVE-2001-1473
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.