SSH Terrapin Attack truncation (CVE-2023-48795)

Summary

The Terrapin Attack allows a network adversary to downgrade SSH security via sequence manipulation.

Vulnerability ID	Vulnerability Overview
CVE-2023-48795	A flaw in the SSH transport protocol allows a man-in-the-middle to truncate negotiation messages, disabling security features like keystroke timing obfuscation.

Affected Supported TeraStations

TS5010/3020/3010
Fixed in firmware version 6.12
 

Back to Security Notices

Date	Description
09/10/2026	Initial release

Back to Security Notices