CVE-2023-34039
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk99th percentile - higher than 99% of all known CVEs
Summary
Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI.
Risk Assessment
This vulnerability could lead to unauthorized access to the system, posing a serious threat to the security of the organization's data and network infrastructure.
Recommendation
It is recommended to implement unique cryptographic key generation and monitor access to Aria Operations for Networks to minimize risk.
Original NVD description (English source)
Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI.