PuTTY Vulnerable to Private Key Compromise Attack
Access Point Consulting
![Access Point Consulting]()
Access Point Consulting
Hands-on cybersecurity for small to mid-sized companies.
PuTTY, a popular SSH and Telnet client, is currently subject to a vulnerability that can allow an attacker to compromise private keys. This vulnerability, identified as CVE-2024-31497 (CVSSv3: 5.9), affects 521-bit ECSA keys, and allows an attacker to recover a user’s NIST P-521 secret key utilizing a quick attack in roughly 60 signatures. The attacker, after compromising the private key, can log into any service for which that key is used. Read more
Report by Matthew Fagan and Alexander Marshall, Access Point Technology