CVE-2016-10009 — Vulnetix

CVE-2016-10009 PUBLISHED CVSS 6.300000190734863 MEDIUM

Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent socket.

EPSS 1.58% · 81.9th percentile

Risk Scores

CVSS 3.1

6.300000190734863

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:W/RC:C

EPSS Score

1.58%

81.9th percentile

Affected Products

Vendor	Product	Versions
ABB	ABB M2M Gateway ARM600, firmware versions >=4.1.2\|<=5.0.3
ABB	ABB M2M Gateway SW, software versions >=5.0.1\|<=5.0.3

Exploit Intelligence

Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Kouf320/attacker-lab-cve-2017-5638-cve-2021-41773-paper (github-poc)
Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability. (github-poc)
Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability. (github-poc)

…and 721 more exploits

Timeline

Dec 19, 2016 CVE Published
Dec 23, 2016 PoC Published
Oct 2, 2020 PoC Published
Nov 6, 2020 PoC Published
Sep 6, 2021 PoC Published
Feb 4, 2022 EPSS Score
Mar 7, 2023 EPSS Score
May 22, 2023 EPSS Score
Oct 9, 2024 PoC Published
Dec 12, 2024 PoC Published
Dec 17, 2024 EPSS Score
Mar 17, 2025 EPSS Score

References

Open in Interactive Console →