Shodan
Last Seen: 2025-04-27

GeneralInformation

rie.sdf.org
sdf.org 

OpenPorts

21 / tcp
-784946306 | 2025-04-25T11:00:48.841075
22 / tcp
-1234918909 | 2025-04-18T04:51:43.752840
70 / tcp
-1001294974 | 2025-04-24T12:39:39.203161
80 / tcp
1624988585 | 2025-04-27T11:33:46.119206
110 / tcp
-1234918909 | 2025-04-19T11:39:08.612104
111 / tcp
-1174912067 | 2025-04-09T14:37:07.720952
111 / udp
919246864 | 2025-04-19T16:23:15.858622
113 / tcp
-75885077 | 2025-04-27T05:37:28.812693
123 / udp
-1738478995 | 2025-04-20T05:09:52.260381
143 / tcp
-1234918909 | 2025-04-10T02:48:34.167541
443 / tcp
-1832378463 | 2025-04-07T02:08:02.061906
993 / tcp
-1234918909 | 2025-04-20T22:54:07.232045

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2025(2)
CVE-2025-26466
5.9A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.
CVE-2025-26465
6.8A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.
2023(1)
CVE-2023-51767
7.0OpenSSH through 9.6, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges.
2008(1)
CVE-2008-3844
9.3Certain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification (Trojan Horse) that allows the package authors to have an unknown impact. NOTE: since the malicious packages were not distributed from any official Red Hat sources, the scope of this issue is restricted to users who may have obtained these packages through unofficial distribution points. As of 20080827, no unofficial distributions of this software are known.
2007(1)
CVE-2007-2768
4.3OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243.



Products
Pricing
Contact Us

Shodan ® - All rights reserved