漏洞描述
VMWare Aria Operations for Networks (vRealize Network Insight) Static SSH key RCE (CVE-2023-34039) Version: All versions from 6.0 to 6.10
影响产品
修复建议
建议关注厂商安全公告,及时升级至已修复版本,并结合实际资产暴露情况采取缓解措施。
参考链接
github.comhttps://github.com/sinsinology/CVE-2023-34039.git↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2023-34039↗packetstormsecurity.comhttp://packetstormsecurity.com/files/174452/VMWare-Aria-Operations-For-Networks-Remote-Code-Execution.html↗packetstormsecurity.comhttp://packetstormsecurity.com/files/175320/VMWare-Aria-Operations-For-Networks-SSH-Private-Key-Exposure.html↗www.vmware.comhttps://www.vmware.com/security/advisories/VMSA-2023-0018.html↗