Vulnerability identifier: #VU15379

Vulnerability risk: Low

CVSSv3.1: 9.1 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C]

CVE-ID: CVE-2018-10933

CWE-ID: CWE-592

Exploitation vector: Network

Exploits in database: 9

• June 9, 2022
  • learn-exploit-cve (? Learning how to exploit the popular CVE) [Github]
• April 7, 2020
  • cve-2018-10933_poc (Variant of hackerhouse-opensource/cve-2018-10933) [Github]
• March 18, 2020
  • LibSSH-exploit (Takes advantage of CVE-2018-10933) [Github]
  • Alien-Framework (Alien-Framework, it is a framework with many CVE exploits and tools to use in pen-testing.) [Github]
  • CVE-2018-10933 (a python script to exploit libssh authentication vulnerability) [Github]
  • libssh Authentication Bypass Scanner [Metasploit]
  • CVE-2018-10933 (CVE-2018-10933 sshlib user authentication attack - docker lab, test and exploit) [Github]
  • hunt-for-cve-2018-10933 (Hunt for and Exploit the libSSH Authentication Bypass (CVE-2018-10933)) [Github]
  • POC-CVE-2018-10933 (LibSSH Authentication Bypass Exploit using RCE) [Github]

Impact: Code execution

Vulnerable software:
libssh
Universal components / Libraries / Libraries used by multiple products

Vendor: libssh