Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xg58-pq9h-2xc7

Опубликовано: 22 авг. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.4

Описание

EdgeConnect SD-WAN Orchestrator instances prior to the versions resolved in this advisory were found to have shared static SSH host keys for all installations. This vulnerability could allow an attacker to spoof the SSH host signature and thereby masquerade as a legitimate Orchestrator host.

EdgeConnect SD-WAN Orchestrator instances prior to the versions resolved in this advisory were found to have shared static SSH host keys for all installations. This vulnerability could allow an attacker to spoof the SSH host signature and thereby masquerade as a legitimate Orchestrator host.

EPSS

Процентиль: 48%
0.00247
Низкий

7.4 High

CVSS3

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 7.4
nvd
больше 2 лет назад

EdgeConnect SD-WAN Orchestrator instances prior to the versions resolved in this advisory were found to have shared static SSH host keys for all installations. This vulnerability could allow an attacker to spoof the SSH host signature and thereby masquerade as a legitimate Orchestrator host.

EPSS

Процентиль: 48%
0.00247
Низкий

7.4 High

CVSS3

Дефекты

CWE-798