CVE-2018-15473
MEDIUM 5.9EPSS 98.6%
OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
- CVSS v3.1
- 5.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - CVSS v3.1
- 5.9 MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS v2.0
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 98.63% chance of exploitation in the next 30 days, 100th percentile
- Nuclei
- medium · CWE-362
- Published
- 2018-08-17
- Updated
- 2025-12-17
Proof-of-concept exploits (55)
- 0xrobiul/CVE-2018-154731★ · 2022-09-03
- 1stPeak/CVE-2018-154730★ · 2020-11-25
- 4xolotl/CVE-2018-154730★ · 2023-10-31
- 66quentin/shodan-CVE-2018-154730★ · 2021-12-11
- Anonimo501/ssh_enum_users_CVE-2018-154730★ · 2023-04-21
- CaioCGH/EP4-redes0★ · 2019-11-01
- Dirty-Racoon/CVE-2018-15473-py30★ · 2020-11-27
- FatemaAlHolayal/-WebMap-Nmap20★ · 2023-01-05
- GaboLC98/userenum-CVE-2018-154730★ · 2023-05-15
- Krishnazzz/WebMap0★ · 2024-10-10
- L3V1ATAN/openssh770★ · 2024-08-12
- LINYIKAI/CVE-2018-15473-exp1★ · 2019-01-23
- MrDottt/CVE-2018-154733★ · 2021-09-14
- Muhammd/nmap2★ · 2020-07-26
- NestyF/SSH_Enum_CVE-2018-154730★ · 2024-10-17
- RanadheerDanda/WebMap0★ · 2019-12-19
- Rhynorater/CVE-2018-15473-Exploit534★ · 2024-07-12
- SUDORM0X/PoC-CVE-2018-154730★ · 2024-11-20
- SabyasachiRana/WebMap1130★ · 2026-08-27
- Sait-Nuri/CVE-2018-1547342★ · 2023-09-04
- Th3S3cr3tAg3nt/WebMap4★ · 2019-03-16
- Wh1t3Fox/cve-2018-154730★ · 2022-03-29
- WildfootW/CVE-2018-15473_OpenSSH_7.70★ · 2020-12-09
- akraas/6sense0★ · 2022-11-08
- alfredo-medina/web-map0★ · 2025-09-01
- anaymalpani/nmapreport0★ · 2023-04-04
- ba56789/WebMap0★ · 2019-06-23
- claudn1ne/WebMap0★ · 2025-09-29
- coollce/CVE-2018-15473_burte0★ · 2020-11-26
- copph33/WebMap0★ · 2025-09-29
- cved-sources/cve-2018-154731★ · 2021-04-15
- epi052/cve-2018-15473116★ · 2024-04-29
- gbonacini/opensshenum3★ · 2018-10-17
- hkm88/WebMap0★ · 2019-04-17
- jcradarsniper/WebMap0★ · 2021-08-11
- jpradoar/webmap1★ · 2019-07-11
- knadt/OpenSSH-Enumeration1★ · 2019-04-26
- korbanbbt/tools-bbounty0★ · 2022-01-19
- mclbn/docker-cve-2018-154731★ · 2024-07-12
- moften/cve-2018-15473-poc0★ · 2025-03-25
- philippedixon/CVE-2018-154730★ · 2023-01-01
- pyperanger/CVE-2018-15473_exploit0★ · 2021-04-06
- r3dxpl0it/CVE-2018-1547317★ · 2020-10-23
- saifmbarki/wMapp0★ · 2023-04-15
- sbeving/GoRecon1★ · 2025-06-13
- sergiovks/SSH-User-Enum-Python3-CVE-2018-154734★ · 2023-03-12
- sv0/webmap0★ · 2023-11-15
- whoami-chmod777/WebMap0★ · 2023-12-27
- yZ1337/CVE-2018-154730★ · 2024-06-17
- yZee00/CVE-2018-154730★ · 2024-06-17
- yZeetje/CVE-2018-154730★ · 2024-06-17
- K3rn3l-32/Threaded-CVE-2018-15473
- kaktus5454/CVE-2018-15473
- kikechans/-SSH-Enum-CVE-2018-15473
- wtbacon/cve-2018-15473
Nuclei templates (1)
ExploitDB entries (3)
- https://www.exploit-db.com/exploits/45233
- https://www.exploit-db.com/exploits/45210
- https://www.exploit-db.com/exploits/45939