CVE-2023-34039
CRITICAL 9.8EPSS 67.2%
Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI.
- Affected
- Aria Operations for Networks
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 67.18% chance of exploitation in the next 30 days, 99th percentile
- Nuclei
- critical · CWE-327
- Published
- 2023-08-29
- Updated
- 2025-02-13
Proof-of-concept exploits (7)
- http://packetstormsecurity.com/files/175320/VMWare-Aria-Operations-For-Networks-SSH-Priva…
- CharonDefalt/CVE-2023-340390★ · 2023-09-02
- Cyb3rEnthusiast/CVE-2023-340393★ · 2023-09-03
- adminxb/CVE-2023-340390★ · 2023-11-10
- sinsinology/CVE-2023-3403994★ · 2023-09-01
- syedhafiz1234/CVE-2023-340391★ · 2023-09-04
- hackingyseguridad/ssha6★ · 2026-07-23
Nuclei templates (1)
Metasploit modules (1)
Security advisories
- https://www.vmware.com/security/advisories/VMSA-2023-0018.html
- http://packetstormsecurity.com/files/174452/VMWare-Aria-Operations-For-Networks-Remote-Co…