CVE-2024-41909

Summary

CVE-2024-41909 is a new vulnerability affecting Apache MINA SSHD, similar to CVE-2023-48795. An attacker intercepting traffic between client and server can manipulate packets, potentially disabling security features and downgrading connections. This issue affects both client and server, requiring upgrades to at least Apache MINA SSHD 2.12.0 for mitigation. Users must ensure both ends of their connection are updated to prevent potential Terrapin attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.