CVE-2023-34039
CRITICAL 9.8EPSS 68.0%
Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI.
- CVSS v3.1
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 67.99% chance of exploitation in the next 30 days, 99th percentile
- Nuclei
- critical · CWE-327
- Published
- 2023-08-29
- Updated
- 2025-02-13
Proof-of-concept exploits (7)
- http://packetstormsecurity.com/files/175320/VMWare-Aria-Operations-For-Networks-SSH-Priva…
- CharonDefalt/CVE-2023-340390★ · 2023-09-02
- Cyb3rEnthusiast/CVE-2023-340393★ · 2023-09-03
- adminxb/CVE-2023-340390★ · 2023-11-10
- sinsinology/CVE-2023-3403997★ · 2023-09-01
- syedhafiz1234/CVE-2023-340391★ · 2023-09-04
- hackingyseguridad/ssha