CVE-2002-1358

CVE-2002-1358 describes a critical vulnerability in multiple SSH2 servers and clients, including products from Cisco, PuTTY, and WinSCP. This flaw stems from improper handling of lists containing empty elements or strings, which can be exploited by remote attackers. With a CVSS score of 10.0, this vulnerability carries the highest severity, indicating that it is easily exploitable over the network with low complexity and no authentication, potentially leading to a complete compromise of confidentiality, integrity, and availability, or even arbitrary code execution. While there is no evidence of active exploitation (KEV: No), the vulnerability has garnered significant community discussion with 10 mentions, suggesting awareness and potential interest in its exploitation, despite the lack of publicly available exploit code in Metasploit, Nuclei, or ExploitDB.