CVE-2021-41617: openssh from 6.2 (inclusive), before 8.8 (exclusive); +15 more affected products

Affected technology

openssh · from 6.2 (inclusive), before 8.8 (exclusive)
openbsd

fedora · 33
fedoraproject

fedora · 34
fedoraproject

fedora · 35
fedoraproject

active iq unified manager · Version not applicable in the source CPE
netapp

clustered data ontap · Version not applicable in the source CPE
netapp

hci management node · Version not applicable in the source CPE
netapp

ontap select deploy administration utility · Version not applicable in the source CPE
netapp

solidfire · Version not applicable in the source CPE
netapp

aff a250 firmware · Version not applicable in the source CPE
netapp

aff 500f firmware · Version not applicable in the source CPE
netapp

http server · 12.2.1.2.0
oracle

http server · 12.2.1.3.0
oracle

http server · 12.2.1.4.0
oracle

zfs storage appliance kit · 8.8
oracle

starwind virtual san · v8r13 · update 14398
starwindsoftware

n/a · n/a
Vendor not specified by the source

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · V3.1.6 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.5 to before *
Siemens

SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · V3.1.6 to before *
Siemens

Description’s affected range: through 8.x before 8.8, when certain non-default configurations are used,

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could gain higher privileges under the conditions described by the source. NVD’s CVSS 3.1 assessment (base score 7.0/10) rates confidentiality, integrity and availability impact as high.