← Back to browse · API

CVE-2023-34039

Severity
CRITICAL
CVSS
9.8
EPSS
0.64194
Risk score
61.67
CISA KEV
No
PoC
No
Published
2023-08-29
Modified
2025-02-13
First seen
2026-08-07
Aliases
EUVD-2023-38160, GHSA-HVFM-XP6C-5FC9
Products
VMware:Aria Operations for Networks Aria Operations for Networks 6.x
Sources
euvd EUVD-2023-38160

Description

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI.

References