Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2019-19754

April 30, 2024, 7:35 p.m.

Tags

Product(s) Impacted

HiveOS

  • 0.6-102@191212

Description

HiveOS through 0.6-102@191212 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-09-26, the vendor indicated that they would consider fixing this.

Weaknesses

Date

Published: April 30, 2024, 6:15 p.m.

Last Modified: April 30, 2024, 7:35 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References