CVE-2002-1646: SSH Secure Shell For Servers

High severity, CVSS 7.5. EPSS: 3.6% chance of exploitation in the next 30 days.

SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g. password) than configured for the server.

Affected products

• SSH Secure Shell For Servers: version 3.0 only; version 3.0.1 only; version 3.1 only; version 3.1.1 only

Published 2002-12-31. Last modified 2026-06-16.