For a short time they PTY is set to mode 666, allowing any user on the system to connect to the screen session.
CVSS Details
- CVSS 4.0 Base Score: 5.3 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-screen | Aug 8, 2025 | May 26, 2025 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-screenamazon-linux-ami-2-upgrade-screen-debuginfo | Jun 13, 2025 | May 26, 2025 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-screenamazon-linux-2023-upgrade-screen-debuginfoamazon-linux-2023-upgrade-screen-debugsource | Jun 11, 2025 | May 13, 2025 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | May 26, 2025 | |
| Debian | no-fix-debian-deb-package | May 15, 2025 | May 15, 2025 | |
| Freebsd | freebsd-upgrade-package-screen | Dec 10, 2025 | May 21, 2025 | |
| Huawei Euleros 2_0_sp10 | huawei-euleros-2_0_sp10-upgrade-screen | Sep 15, 2025 | Aug 9, 2025 | |
| Huawei Euleros 2_0_sp11 | huawei-euleros-2_0_sp11-upgrade-screen | Aug 13, 2025 | Aug 9, 2025 | |
| Huawei Euleros 2_0_sp12 | huawei-euleros-2_0_sp12-upgrade-screen | Sep 15, 2025 | Aug 9, 2025 | |
| Huawei Euleros 2_0_sp13 | huawei-euleros-2_0_sp13-upgrade-screen | Aug 13, 2025 | Aug 9, 2025 | |
| Redhat_linux | — | no-fix-redhat-rpm-package | Jul 9, 2025 | May 26, 2025 |
| Suse | — | suse-upgrade-screen | Dec 5, 2025 | Jun 19, 2025 |
| Ubuntu | ubuntu-upgrade-screen | Jan 27, 2026 | May 26, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub