Van Dyke Technologies develops a focused line of secure terminal, file transfer, and tunneling products including SecureCRT, SecureFX, VShell, and Entunnel that serve system administrators and secure remote-access workflows. While the vendor's disclosure volume remains modest, its vulnerabilities have attracted public exploit tooling, reflecting the appeal of remote-access appliances and terminal software as targets for lateral movement and credential harvesting. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Van Dyke Technologies over time
Signals from CVEs in this vendor scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2002-1059HIGH Buffer overflow in Van Dyke SecureCRT SSH client before 3.4.6, and 4.x before 4.0 beta 3, allows an SSH server to execute arbitrary code via a long SSH1 protocol version string. | Oct 4, 2002 | 7.5 | 70 | NO | YES |
CVE-2006-1038HIGH Buffer overflow in SecureCRT 5.0.4 and earlier and SecureFX 3.0.4 and earlier allows remote attackers to have an unknown impact when a Unicode string is converted to a "narrow" str | Mar 7, 2006 | 10.0 | 25 | NO | NO |
CVE-2004-1541HIGH SecureCRT 4.0, 4.1, and possibly other versions, allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file o | Dec 31, 2004 | 7.5 | 24 | NO | NO |
CVE-2007-6031HIGH Unspecified vulnerability in VanDyke VShell 3.0.1 allows remote attackers to cause a denial of service via unspecified vectors. NOTE: this information is based upon a vague adviso | Nov 20, 2007 | 7.8 | 20 | NO | NO |
CVE-2001-1466HIGH Buffer overflow in VanDyke SecureCRT before 3.4.2, when using the SSH-1 protocol, allows remote attackers to execute arbitrary code via a long (1) username or (2) password. | Dec 30, 2001 | 7.5 | 20 | NO | NO |
CVE-2001-0155HIGH Format string vulnerability in VShell SSH gateway 1.0.1 and earlier allows remote attackers to execute arbitrary commands via a user name that contains format string specifiers. | Jun 2, 2001 | 7.5 | 20 | NO | NO |
CVE-2003-0047MEDIUM SSH2 clients for VanDyke (1) SecureCRT 4.0.2 and 3.4.7, (2) SecureFX 2.1.2 and 2.0.4, and (3) Entunnel 1.0.2 and earlier, do not clear logon credentials from memory, including plai | Feb 19, 2003 | 4.6 | 14 | NO | NO |
VShell SSH gateway 1.0.1 and earlier has a default port forwarding rule of 0.0.0.0/0.0.0.0, which could allow local users to conduct arbitrary port forwarding to other systems. | Jun 2, 2001 | 2.1 | 11 | NO | NO |
Signals from CVEs in this vendor scope (8 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Van Dyke Technologies.
Media articles that mention a CVE ID that affects a product developed by Van Dyke Technologies — matched by CVE ID, not by vendor name.