PT-2021-17650 · Tectia · Ssh Tectia Client+2

Published 2021-03-15 · Updated 2021-03-23 · CVE-2021-27891

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SSH Tectia Client and Server versions prior to 6.4.19 ConnectSecure versions prior to 6.4.19

Description: The issue is related to weak key generation in the affected software. This weakness can potentially be exploited.

Recommendations: For SSH Tectia Client and Server versions prior to 6.4.19, update to version 6.4.19 or later. For ConnectSecure versions prior to 6.4.19, update to version 6.4.19 or later.

Fix

Related Identifiers

CVE-2021-27891

Affected Products

Connectsecure

Ssh Tectia Client

Ssh Tectia Server

References · 3

• https://info.ssh.com/tectia-vulnerability-cve-2021-27891 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-27891 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27891 · Security Note