Question 1

What is CVE-2002-1358?

Accepted Answer

CVE-2002-1358 is a high-severity software vulnerability (Improper input validation) with a CVSS score of 10. Multiple SSH2 servers and clients do not properly handle lists with empty elements or strings, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code, as demonstrated by the SSHredder SSH protocol t

Question 2

Is CVE-2002-1358 being actively exploited?

Accepted Answer

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 6%.

Question 3

What products does CVE-2002-1358 affect?

Accepted Answer

Tracked products affected include WinSCP. Check the version you run to see whether it is affected.

Question 4

How do I fix CVE-2002-1358?

Accepted Answer

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

CVE-2002-1358

Summary

Impact & exploitability

Affected products we track (1)

Recommendation

Additional information