Beveiligingsadvies

CVE-2019-19754

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-04-30 00:00:00
Laatst bijgewerkt 2024-11-06 23:08:08
Toegewezen door mitre
CVSS-score 5.7
Status PUBLISHED

Beschrijving

HiveOS through 0.6-102@191212 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-09-26, the vendor indicated that they would consider fixing this.