Bash Remote Code Execution (CVE-2014-6277 / CVE-2014-6278) (Shellshock)

high Nessus Plugin ID 78067

Version 1.37

Oct 3, 2025, 2:02 AM

  • CISA reference
  • CVSS metrics ("CVSSv3 score" set to 8.8)
  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H")
  • CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:F/RL:O/RC:C")
  • CVSSv2 score source (changed from "CVE-2014-6277" to "CVE-2014-6278")

Plugin Feed: 202510030202

Version 1.36

Nov 27, 2023, 6:11 PM

  • Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.)

Plugin Feed: 202311271811

Version 1.35

Nov 27, 2023, 4:16 PM

  • Detection (No longer fall back to the legacy SSH library. Only use the old library explicitly.)

Plugin Feed: 202311271616

* Changelogs are generally available for changes made after Nov 1, 2022