CVE-2024-6580

The /n software IPWorks SSH library SFTPServer component can be induced to make unintended filesystem or network path requests when loading a SSH public key or certificate. To be exploitable, an application calling the SFTPServer component must grant user access without verifying the SSH public key or certificate (which would most likely be a separate vulnerability in the calling application). IPWorks SSH versions 22.0.8945 and 24.0.8945 were released to address this condition by blocking all filesystem and network path requests for SSH public keys or certificates.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.nsoftware.com/kb/articles/cve-2024-5806	Vendor Advisory
https://www.nsoftware.com/kb/articles/cve-2024-5806	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:nsoftware:ipworks_ssh:22.0.8945:::::.net::
	cpe:2.3:a:nsoftware:ipworks_ssh:24.0.8945:::::.net::

History

26 Sep 2025, 14:19

Type	Values Removed	Values Added
CPE		cpe:2.3:a:nsoftware:ipworks_ssh:24.0.8945:::::.net:: cpe:2.3:a:nsoftware:ipworks_ssh:22.0.8945:::::.net::
CWE		CWE-347
First Time		Nsoftware Nsoftware ipworks Ssh
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 6.5
References	~~() https://www.nsoftware.com/kb/articles/cve-2024-5806 -~~	() https://www.nsoftware.com/kb/articles/cve-2024-5806 - Vendor Advisory

Information

Published : 2024-07-08 19:15

Updated : 2025-09-26 14:19

NVD link : CVE-2024-6580

Mitre link : CVE-2024-6580

CVE.ORG link : CVE-2024-6580

JSON object : View

Products Affected

nsoftware

ipworks_ssh

CWE

CWE-1390

Weak Authentication

CWE-347

Improper Verification of Cryptographic Signature

{"id": "CVE-2024-6580", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}], "cvssMetricV40": [{"type": "Secondary", "source": "9119a7d8-5eab-497f-8521-727c672e3725", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 2.3, "Automatable": "NO", "attackVector": "NETWORK", "baseSeverity": "LOW", "valueDensity": "DIFFUSE", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:D/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2024-07-08T19:15:10.913", "references": [{"url": "https://www.nsoftware.com/kb/articles/cve-2024-5806", "tags": ["Vendor Advisory"], "source": "9119a7d8-5eab-497f-8521-727c672e3725"}, {"url": "https://www.nsoftware.com/kb/articles/cve-2024-5806", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "9119a7d8-5eab-497f-8521-727c672e3725", "description": [{"lang": "en", "value": "CWE-1390"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-347"}]}], "descriptions": [{"lang": "en", "value": "The /n software IPWorks SSH library SFTPServer component can be induced to make unintended filesystem or network path requests when loading a SSH public key or certificate. To be exploitable, an application calling the SFTPServer component must grant user access without verifying the SSH public key or certificate (which would most likely be a separate vulnerability in the calling application).\u00a0IPWorks SSH versions 22.0.8945 and 24.0.8945 were released to address this condition by blocking all filesystem and network path requests for SSH public keys or certificates."}, {"lang": "es", "value": "Se puede inducir al componente SFTPServer de la librer\u00eda SSH de IPWorks del software /n a realizar solicitudes no deseadas de ruta de red o de sistema de archivos al cargar un certificado o clave p\u00fablica SSH. Para ser explotable, una aplicaci\u00f3n que llama al componente SFTPServer debe otorgar acceso al usuario sin verificar la clave p\u00fablica o el certificado SSH (lo que probablemente ser\u00eda una vulnerabilidad separada en la aplicaci\u00f3n que llama). Las versiones 22.0.8945 y 24.0.8945 de IPWorks SSH se lanzaron para abordar esta condici\u00f3n mediante el bloqueo de todas las solicitudes de rutas de red y sistemas de archivos para claves p\u00fablicas o certificados SSH."}], "lastModified": "2025-09-26T14:19:51.187", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nsoftware:ipworks_ssh:22.0.8945:*:*:*:*:.net:*:*", "vulnerable": true, "matchCriteriaId": "7E92E6CD-0F20-436E-8C44-6577979ACC65"}, {"criteria": "cpe:2.3:a:nsoftware:ipworks_ssh:24.0.8945:*:*:*:*:.net:*:*", "vulnerable": true, "matchCriteriaId": "5EB47550-196F-493D-B7A6-FE3206D34050"}], "operator": "OR"}]}], "sourceIdentifier": "9119a7d8-5eab-497f-8521-727c672e3725"}