CVE-2025-61939
HIGHColumbia Weather MicroServer Firmware - Reverse SSH Redirection
Title source: manualDescription
An unused function in MicroServer can start a reverse SSH connection to a vendor registered domain, without mutual authentication. An attacker on the local network with admin access to the web server, and the ability to manipulate DNS responses, can redirect the SSH connection to an attacker controlled device.
References (2)
Core 2
Core References
Third Party Advisory
https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-006-01.json
Third Party Advisory, US Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-26-006-01
Scores
CVSS v3
8.8
EPSS
0.0024
EPSS Percentile
15.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-923
Status
published
Products (1)
columbiaweather/weather_microserver_firmware
< MS_4.1_14142
Published
Jan 07, 2026
Tracked Since
Feb 18, 2026