Icon Labs (www.icon-labs.com) a leading provider of embedded networking solutions, today that Iconfidant™ SSH version 2.3.8 for VxWorks and embedded Linux provides updates for security vulnerabilities.
Three Secure Shell (SSH) vulnerabilities exist in earlier versions of Iconfidant SSH that may result in system instability. The first vulnerability may be triggered during SSH login activity that is conducted within aggressive time frames. The second vulnerability may be triggered with normal SSH login activity in combination with other management actions occurring simultaneously. The third vulnerability may be triggered during SSH login and is specific to the usage of unique invalid authentication credentials.
There are no workarounds for these vulnerabilities. Note: These vulnerabilities are independent of each other; a device may be affected by one vulnerability and not by the others. Icon Labs customers are encouraged to contact support@icon-labs.com for more information or to receive the updated version of Iconfidant SSH.
About Icon Laboratories, Inc.
Icon Labs provides Embedded SSH, SSL and SNMP software and software development services to the growing embedded networking industry. Icon Labs helps developers Move Faster. Founded in 1992, Icon Labs is headquartered in West Des Moines, Iowa. For more information, visit www.icon-labs.com, send e-mail to info@icon-labs.com, or call 1.888.235.3443 (U.S. and Canada) or 515.226.3443 (International).