Vulnerability Details CVE-2025-11625
Improper host authentication vulnerability in wolfSSH version 1.4.20 and earlier clients that allows authentication bypass and leaking of clients credentials.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.6%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2025-11625
-
cpe:2.3:a:wolfssh:wolfssh:0.1
-
cpe:2.3:a:wolfssh:wolfssh:0.2.0
-
cpe:2.3:a:wolfssh:wolfssh:1.0.0
-
cpe:2.3:a:wolfssh:wolfssh:1.1.0
-
cpe:2.3:a:wolfssh:wolfssh:1.2.0
-
cpe:2.3:a:wolfssh:wolfssh:1.2.2
-
cpe:2.3:a:wolfssh:wolfssh:1.3.0
-
cpe:2.3:a:wolfssh:wolfssh:1.3.1
-
cpe:2.3:a:wolfssh:wolfssh:1.4.0
-
cpe:2.3:a:wolfssh:wolfssh:1.4.10
-
cpe:2.3:a:wolfssh:wolfssh:1.4.11
-
cpe:2.3:a:wolfssh:wolfssh:1.4.12
-
cpe:2.3:a:wolfssh:wolfssh:1.4.13
-
cpe:2.3:a:wolfssh:wolfssh:1.4.15
-
cpe:2.3:a:wolfssh:wolfssh:1.4.16
-
cpe:2.3:a:wolfssh:wolfssh:1.4.17
-
cpe:2.3:a:wolfssh:wolfssh:1.4.18
-
cpe:2.3:a:wolfssh:wolfssh:1.4.19
-
cpe:2.3:a:wolfssh:wolfssh:1.4.2
-
cpe:2.3:a:wolfssh:wolfssh:1.4.20
-
cpe:2.3:a:wolfssh:wolfssh:1.4.3
-
cpe:2.3:a:wolfssh:wolfssh:1.4.4
-
cpe:2.3:a:wolfssh:wolfssh:1.4.5
-
cpe:2.3:a:wolfssh:wolfssh:1.4.6
-
cpe:2.3:a:wolfssh:wolfssh:1.4.7
-
cpe:2.3:a:wolfssh:wolfssh:1.4.8
-
cpe:2.3:a:wolfssh:wolfssh:1.4.9