Critical severity9.8NVD Advisory· Published May 13, 2020· Updated Jun 17, 2026

CVE-2020-10654

Description

Ping Identity PingID SSH before 4.0.14 contains a heap buffer overflow in PingID-enrolled servers. This condition can be potentially exploited into a Remote Code Execution vector on the authenticating endpoint.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pingidentity/PingID SSHllm-fuzzy
Range: <4.0.14
Pingidentity/PingIDMllm-fuzzy
Range: <4.0.14
Ping Identity/PingID SSHdescription
Pingidentity/Pingid SSH Integration
cpe:2.3:a:pingidentity:pingid_ssh_integration:*:*:*:*:*:*:*:*
Range: <4.0.14

Patches

Vulnerability mechanics

References

docs.pingidentity.com/bundle/pingid/page/hmc1587998527490.htmlnvdVendor Advisory
docs.pingidentity.com/bundle/pingid/page/okt1564020467088.htmlnvdVendor Advisory
www.pingidentity.comnvdProduct
www.pingidentity.com/en/cloud/pingid.htmlnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000