Vulnerability Details : CVE-2016-6210
Public exploit exists!
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
Vulnerability category: Information leak
Products affected by CVE-2016-6210
- cpe:2.3:a:openbsd:openssh:*:p2:*:*:*:*:*:*
Threat overview for CVE-2016-6210
Top countries where our scanners detected CVE-2016-6210
Top open port discovered on systems with this issue
22
IPs affected by CVE-2016-6210 2,748,471
Threat actors abusing to this issue?
Yes
Find out if you* are
affected by CVE-2016-6210!
*Directly or indirectly through your vendors, service providers and 3rd parties.
Powered by
attack surface intelligence
from SecurityScorecard.
Exploit prediction scoring system (EPSS) score for CVE-2016-6210
10.67%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 95 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2016-6210
-
SSH Username Enumeration
First seen: 2020-04-26auxiliary/scanner/ssh/ssh_enumusersThis module uses a malformed packet or timing attack to enumerate users on an OpenSSH server. The default action sends a malformed (corrupted) SSH_MSG_USERAUTH_REQUEST packet using public key authentication (must be enabled) to enumerate users. On
CVSS scores for CVE-2016-6210
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:N/A:N |
8.6
|
2.9
|
NIST | |
|
5.9
|
MEDIUM | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
2.2
|
3.6
|
NIST |
CWE ids for CVE-2016-6210
-
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.Assigned by: nvd@nist.gov (Primary)
References for CVE-2016-6210
-
http://seclists.org/fulldisclosure/2016/Jul/51
Full Disclosure: opensshd - user enumerationMailing List;Third Party Advisory
-
https://www.exploit-db.com/exploits/40113/
OpenSSHd 7.2p2 - Username Enumeration
-
http://www.debian.org/security/2016/dsa-3626
Debian -- Security Information -- DSA-3626-1 openssh
-
https://security.netapp.com/advisory/ntap-20190206-0001/
CVE-2016-6210 OpenSSH Vulnerability in NetApp Products | NetApp Product Security
-
http://www.securityfocus.com/bid/91812
OpenSSH CVE-2016-6210 User Enumeration VulnerabilityVDB Entry;Third Party Advisory
-
http://www.securitytracker.com/id/1036319
OpenSSH Lets Remote Users Determine Valid Usernames on the Target System - SecurityTracker
-
https://access.redhat.com/errata/RHSA-2017:2029
RHSA-2017:2029 - Security Advisory - Red Hat Customer Portal
-
https://www.exploit-db.com/exploits/40136/
OpenSSH 7.2p2 - Username Enumeration
-
https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
-
https://www.openssh.com/txt/release-7.3
Release Notes;Vendor Advisory
-
https://security.gentoo.org/glsa/201612-18
OpenSSH: Multiple vulnerabilities (GLSA 201612-18) — Gentoo security
-
https://access.redhat.com/errata/RHSA-2017:2563
RHSA-2017:2563 - Security Advisory - Red Hat Customer Portal
Jump to