Logo
vulnerabilityCVE-2025-14821
Name
CVE-2025-14821
Source
NVD ( link)Debian ( link)
Description
A flaw was found in libssh. This vulnerability allows local man-in-the-middle attacks, security downgrades of SSH (Secure Shell) connections, and manipulation of trusted host information, posing a significant risk to the confidentiality, integrity, and availability of SSH communications via an insecure default configuration on Windows systems where the library automatically loads configuration files from the C:\etc directory, which can be created and modified by unprivileged local users.
Published Date
Updated Date
Workaround
-

Analysis#


Affected Component
Analysis
libssh
Exploitable

Vulnerability Ratings#


7.8
CVSSv31
7
CVSSv31
NaN
other

Others affected components#


Name
Project
Project Version
Version
Status
buildroot
master
0.12.0
Not Affected
openwrt
master
0.12.0-r1
Not Affected
openwrt
openwrt-25.12
0.11.3-r1
Exploitable
yocto
kirkstone
0.8.9
Exploitable
yocto
master
0.11.4
Exploitable
yocto
scarthgap
0.10.6
False Positive