CVE-2025-32942 - Vulnerability Details - OpenCVE

SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's session traffic.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required High

Scope Changed

Confidentiality Impact Low

Integrity Impact High

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Ssh	Tectia Server

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors	Products
Ssh	Tectia Server

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://info.ssh.com/tectia-vulnerability-cve-2025-32942

History

Fri, 03 Oct 2025 08:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Ssh Ssh tectia Server
Vendors & Products		Ssh Ssh tectia Server

Thu, 02 Oct 2025 20:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 02 Oct 2025 19:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-670
Metrics		cvssV3_1 `{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L'}`

Thu, 02 Oct 2025 19:00:00 +0000

Type	Values Removed	Values Added
Description		SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's session traffic.
References		https://info.ssh.com/tectia-vulnerability-cve-2025-32942

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2025-10-02T00:00:00.000Z

Updated: 2025-10-02T19:47:50.861Z

Reserved: 2025-04-14T00:00:00.000Z

Link: CVE-2025-32942

Vulnrichment

Updated: 2025-10-02T19:32:06.104Z

NVD

Status : Received

Published: 2025-10-02T19:15:30.123

Modified: 2025-10-02T19:15:30.123

Link: CVE-2025-32942

Redhat

No data.

OpenCVE Enrichment

Updated: 2025-10-03T08:22:34Z

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2025-32942", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-10-02T19:47:50.861Z", "dateReserved": "2025-04-14T00:00:00.000Z", "datePublished": "2025-10-02T00:00:00.000Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Tectia Server", "vendor": "SSH", "versions": [{"lessThan": "6.4.21", "status": "affected", "version": "0", "versionType": "semver"}, {"lessThan": "6.5.3", "status": "affected", "version": "6.5.0", "versionType": "semver"}, {"lessThan": "6.6.6", "status": "affected", "version": "6.6.0", "versionType": "semver"}, {"lessThan": "7.0.0", "status": "affected", "version": "6.7.0", "versionType": "semver"}]}], "descriptions": [{"lang": "en", "value": "SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's session traffic."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-670", "description": "CWE-670 Always-Incorrect Control Flow Implementation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2025-10-02T19:39:04.816Z"}, "references": [{"url": "https://info.ssh.com/tectia-vulnerability-cve-2025-32942"}], "x_generator": {"engine": "enrichogram 0.0.1"}, "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L"}}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*", "versionEndExcluding": "6.4.21"}, {"vulnerable": true, "criteria": "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5.0", "versionEndExcluding": "6.5.3"}, {"vulnerable": true, "criteria": "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.6.0", "versionEndExcluding": "6.6.6"}, {"vulnerable": true, "criteria": "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.7.0", "versionEndExcluding": "7.0.0"}]}]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-02T19:31:43.027276Z", "id": "CVE-2025-32942", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-02T19:47:50.861Z"}}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-32942", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-02T19:31:43.027276Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-02T19:32:06.104Z"}}], "cna": {"metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.2, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:L"}}], "affected": [{"vendor": "SSH", "product": "Tectia Server", "versions": [{"status": "affected", "version": "0", "lessThan": "6.4.21", "versionType": "semver"}, {"status": "affected", "version": "6.5.0", "lessThan": "6.5.3", "versionType": "semver"}, {"status": "affected", "version": "6.6.0", "lessThan": "6.6.6", "versionType": "semver"}, {"status": "affected", "version": "6.7.0", "lessThan": "7.0.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://info.ssh.com/tectia-vulnerability-cve-2025-32942"}], "x_generator": {"engine": "enrichogram 0.0.1"}, "descriptions": [{"lang": "en", "value": "SSH Tectia Server before 6.6.6 sometimes allows attackers to read and alter a user's session traffic."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-670", "description": "CWE-670 Always-Incorrect Control Flow Implementation"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.4.21"}, {"criteria": "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.5.3", "versionStartIncluding": "6.5.0"}, {"criteria": "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.6", "versionStartIncluding": "6.6.0"}, {"criteria": "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.0.0", "versionStartIncluding": "6.7.0"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2025-10-02T19:39:04.816Z"}}}, "cveMetadata": {"cveId": "CVE-2025-32942", "state": "PUBLISHED", "dateUpdated": "2025-10-02T19:47:50.861Z", "dateReserved": "2025-04-14T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2025-10-02T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.1"}