PT-2018-19077 · None · Freesshd

Published 2018-07-10 · Updated 2019-10-03 · CVE-2018-9853

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions freeSSHd version 1.3.1

Description The issue is related to insecure access control, allowing attackers to gain privileges of the freesshd.exe process. This can be achieved by logging in to an unprivileged account on the server.

Recommendations For freeSSHd version 1.3.1, consider restricting access to unprivileged accounts on the server until a fix is available. As a temporary workaround, review and limit the privileges assigned to the freesshd.exe process to minimize potential damage.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2018-9853

Affected Products

Freesshd

References · 4

• 🔥 https://medium.com/@TheWindowsTwin/vulnerability-in-freesshd-5a0abc147d7a · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-9853 · Security Note
• https://osv.dev/vulnerability/CVE-2018-9853 · Vendor Advisory
• https://medium.com/%40TheWindowsTwin/vulnerability-in-freesshd-5a0abc147d7a · Note