CVE-2025-32942 - Vulnerability Details - OpenCVE

SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's session traffic.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required High

Scope Changed

Confidentiality Impact Low

Integrity Impact High

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

No data.

References

Link	Providers
https://info.ssh.com/tectia-vulnerability-cve-2025-32942

History

Thu, 02 Oct 2025 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 02 Oct 2025 19:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-670
Metrics		cvssV3_1 `{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L'}`

Thu, 02 Oct 2025 19:00:00 +0000

Type	Values Removed	Values Added
Description		SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's session traffic.
References		https://info.ssh.com/tectia-vulnerability-cve-2025-32942

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2025-10-02T00:00:00.000Z

Updated: 2025-10-02T19:47:50.861Z

Reserved: 2025-04-14T00:00:00.000Z

Link: CVE-2025-32942

Vulnrichment

Updated: 2025-10-02T19:32:06.104Z

NVD

Status : Received

Published: 2025-10-02T19:15:30.123

Modified: 2025-10-02T19:15:30.123

Link: CVE-2025-32942

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2025-32942", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-10-02T19:47:50.861Z", "dateReserved": "2025-04-14T00:00:00.000Z", "datePublished": "2025-10-02T00:00:00.000Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Tectia Server", "vendor": "SSH", "versions": [{"lessThan": "6.4.21", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThan": "6.5.3", "status": "affected", "version": "6.5.0", "versionType": "semver"}, {"lessThan": "6.6.6", "status": "affected", "version": "6.6.0", "versionType": "semver"}, {"lessThan": "7.0.0", "status": "affected", "version": "6.7.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "value": "SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's session traffic."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-670", "description": "CWE-670 Always-Incorrect Control Flow Implementation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2025-10-02T19:39:04.816Z"}, "references": [{"url": "https://info.ssh.com/tectia-vulnerability-cve-2025-32942"}], "x_generator": {"engine": "enrichogram 0.0.1"}, "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L"}}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.4.21"}, {"vulnerable": true, "criteria": "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5.0", "versionEndExcluding": "6.5.3"}, {"vulnerable": true, "criteria": "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.0", "versionEndExcluding": "6.6.6"}, {"vulnerable": true, "criteria": "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7.0", "versionEndExcluding": "7.0.0"}]}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-02T19:31:43.027276Z", "id": "CVE-2025-32942", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-02T19:47:50.861Z"}}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-32942", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-02T19:31:43.027276Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-02T19:32:06.104Z"}}], "cna": {"metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L"}}], "affected": [{"vendor": "SSH", "product": "Tectia Server", "versions": [{"status": "affected", "version": "0", "lessThan": "6.4.21", "versionType": "semver"}, {"status": "affected", "version": "6.5.0", "lessThan": "6.5.3", "versionType": "semver"}, {"status": "affected", "version": "6.6.0", "lessThan": "6.6.6", "versionType": "semver"}, {"status": "affected", "version": "6.7.0", "lessThan": "7.0.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://info.ssh.com/tectia-vulnerability-cve-2025-32942"}], "x_generator": {"engine": "enrichogram 0.0.1"}, "descriptions": [{"lang": "en", "value": "SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's session traffic."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-670", "description": "CWE-670 Always-Incorrect Control Flow Implementation"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.4.21"}, {"criteria": "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.5.3", "versionStartIncluding": "6.5.0"}, {"criteria": "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.6", "versionStartIncluding": "6.6.0"}, {"criteria": "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.0.0", "versionStartIncluding": "6.7.0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2025-10-02T19:39:04.816Z"}}}, "cveMetadata": {"cveId": "CVE-2025-32942", "state": "PUBLISHED", "dateUpdated": "2025-10-02T19:47:50.861Z", "dateReserved": "2025-04-14T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2025-10-02T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.1"}