CVE-2002-1359
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer o...
Affects 7 products across 7 vendors.
Software does not validate or incorrectly validates input, allowing attackers to craft data processed in unintended ways.
Show all 51
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
Multiple SSH2 servers and clients are vulnerable to buffer overflow attacks due to improper handling of large packets or fields, potentially leading to denial of service or arbitrary code execution.
BSID: BS-2002-GLOBAL-172858-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2002-1359?
What is the CVSS score for CVE-2002-1359?
Is CVE-2002-1359 actively exploited?
How do I remediate CVE-2002-1359?
What systems are affected by CVE-2002-1359?
| CVE ID | CVE-2002-1359 |
|---|---|
| BSID | BS-2002-GLOBAL-172858-C BreachSpider Global ID |
| CVSS Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| Published | 2002-12-23 |
| Last Modified | 2026-06-16 |
| ICS Relevance | 55% |
| Weakness (CWE) | |
| Domains | |
| Source | NVD |
Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial of service or possibly execute arbitrary code via buffer overflow attacks, as demonstrated by the SSHredder SSH protocol test suite.
Source: NIST NVD / MITRE CVE Database
Remote attackers can exploit this vulnerability by sending specially crafted large packets or fields to the SSH2 server or client, causing a buffer overflow.
Exploitation Likelihood: CRITICAL
| Vendor | Product | Affected Versions |
|---|---|---|
| Cisco | Ios | 12.0s 12.0st 12.1e 12.1ea 12.1t 12.2+2 more12.2s 12.2t |
| Fissh | Ssh Client | 1.0a_for_windows |
| Intersoft | Securenetterm | 5.4.1 |
| Netcomposite | Shellguard Ssh | 3.4.6 |
| Pragma Systems | Secureshell | 2.0 |
| Putty | Putty | 0.48 0.49 0.53 |
| Winscp | Winscp | 2.0.0 |
No official vendor advisory link on record. See the CVE record →
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | ⚠ Available — Reference |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
Critical Severity - Know Your Exposure
A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →