CVE-2019-1000018

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-02-04 · updated 2026-06-17
Weakness: CWE-77

Description

rssh version 2.3.4 contains a CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in allowscp permission that can result in Local command execution. This attack appear to be exploitable via An authorized SSH user with the allowscp permission.

Affected products

Canonical Ubuntu Linux: 14.04, 16.04, 18.04, 18.10
Debian Linux: 8.0, 9.0
Fedoraproject Fedora: 29, 30, 31
Pizzashack Rssh: 2.3.4

References

http://seclists.org/fulldisclosure/2021/May/78
https://esnet-security.github.io/vulnerabilities/20190115_rssh
https://github.com/WlX-33/PoC-for-CVE/blob/main/CVE-2021-33216%2CCVE-2019-1000018/CommScope%20Ruckus%20IoT%20Controller%201.7.1.0%20Undocumented%20Account.txt
https://lists.debian.org/debian-lts-announce/2019/01/msg00027.html
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HO3MDU3AH5SLYBKHH5PJ6PHC63ASIF42/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KR2OHTHMJVV4DO3HDRFQQZ5JENHDJQEN/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T42YYNWJZG422GATWAHAEK4A24OKY557/
https://security.gentoo.org/glsa/202007-29
https://usn.ubuntu.com/3946-1/
https://www.debian.org/security/2019/dsa-4377
http://seclists.org/fulldisclosure/2021/May/78
https://esnet-security.github.io/vulnerabilities/20190115_rssh

Get alerted when CVE-2019-1000018 or the next vulnerability affects your stack