Vulnerabilities

CVSS

7.0 High

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Risk score

56.0

Published

2021-09-26

Status

Modified

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.

Coverage 1

data-breach

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP

Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the firmware version V3.1.6 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP (incl. SIPLUS variant). Siemens is preparing fix versions…

CISA Advisories · Jul 28, 2026 High

CVE-2021-41617CVE-2023-28531CVE-2023-51384

All articles mentioning it

Advisories and references

• bugzilla.suse.com/show_bug.cgi?id=1190975
• lists.debian.org/debian-lts-announce/2023/12/msg00017.html
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedor...
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedor...
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedor...
• security.netapp.com/advisory/ntap-20211014-0004/
• debian.org/security/2023/dsa-5586
• openssh.com/security.html
• openssh.com/txt/release-8.8
• openwall.com/lists/oss-security/2021/09/26/1