Wiz
Vulnerability DatabaseCVE-2012-5975

CVE-2012-5975: 
SSH Communications Tectia Server vulnerability analysis and mitigation

The SSH USERAUTH CHANGE REQUEST feature in SSH Tectia Server 6.0.4 through 6.0.20, 6.1.0 through 6.1.12, 6.2.0 through 6.2.5, and 6.3.0 through 6.3.2 on UNIX and Linux, when old-style password authentication is enabled, allows remote attackers to bypass authentication via a crafted session involving entry of blank passwords, as demonstrated by a root login session from a modified OpenSSH client with an added input_userauth_passwd_changereq call in sshconnect2.c.

Source: NVD

Related SSH Communications Tectia Server vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2012-5975HIGH9.3
  • SSH Communications Tectia ServerSSH Communications Tectia Server
  • cpe:2.3:a:ssh:tectia_server
NoYesDec 04, 2012
CVE-2021-27891HIGH8.8
  • SSH Communications Tectia ServerSSH Communications Tectia Server
  • cpe:2.3:a:ssh:tectia_client
NoYesMar 15, 2021
CVE-2021-27892HIGH7.8
  • SSH Communications Tectia ServerSSH Communications Tectia Server
  • cpe:2.3:a:ssh:tectia_client
NoYesMar 15, 2021
CVE-2025-32942HIGH7.2
  • SSH Communications Tectia ServerSSH Communications Tectia Server
  • cpe:2.3:a:ssh:tectia_server
NoYesOct 02, 2025
CVE-2021-27893HIGH7
  • SSH Communications Tectia ServerSSH Communications Tectia Server
  • cpe:2.3:a:ssh:tectia_client
NoYesMar 15, 2021

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Additional Wiz resources

Cloud Vulnerability DB

Cloud Vulnerability DB

A community-led vulnerabilities database

Cloud Threat Landscape

Cloud Threat Landscape

A threat intelligence database

PEACH

PEACH

A tenant isolation framework

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management
Get a demo