Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wgjq-hm36-r7r8

Опубликовано: 30 апр. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated plans to fix this in the next image build.

nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated plans to fix this in the next image build.

EPSS

Процентиль: 38%
0.0017
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-321

Связанные уязвимости

CVSS3: 9.8
nvd
почти 2 года назад

nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated plans to fix this in the next image build.

EPSS

Процентиль: 38%
0.0017
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-321