OpenSSH observable discrepancy leak (CVE-2020-14145)

Summary

An information leak in OpenSSH allows a man-in-the-middle to determine if a client recognizes a host key.

Vulnerability ID	Vulnerability Overview
CVE-2020-14145	The OpenSSH client algorithm negotiation leaks whether the client has previously seen a server's host key, aiding targeted man-in-the-middle attacks.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/09/2026	Initial release

Back to Security Notices