VULNERABILITY INTELLIGENCE
CVE-2012-6066
CVSS score9.3 HIGH
EPSS probability39.51%
CISA KEVNot currently listed
Published2012-12-04
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
freeSSHd.exe in freeSSHd through 1.2.6 allows remote attackers to bypass authentication via a crafted session, as demonstrated by an OpenSSH client with modified versions of ssh.c and sshconnect2.c.
Weakness classification
- CWE-287: Improper Authentication