CVE-2023-34039
CRITICAL NUCLEIVMWare Aria Operations for Networks (vRealize Network Insight) SSH Private Key Exposure
Title source: metasploitExploitation Summary
EIP tracks 6 public exploits for CVE-2023-34039.
PoCs published by sinsinology, Cyb3rEnthusiast, syedhafiz1234, including Metasploit module exploits/linux/ssh/vmware_vrni_known_privkey.
A Nuclei detection template is also available.
AI-analyzed exploit summary This PoC exploits CVE-2023-34039 by attempting SSH authentication using static private keys for the 'support' user in VMWare Aria Operations for Networks. Successful authentication grants a root shell due to misconfigured sudo permissions.
Description
Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI.
Exploits (6)
This PoC exploits CVE-2023-34039 by attempting SSH authentication using static private keys for the 'support' user in VMWare Aria Operations for Networks. Successful authentication grants a root shell due to misconfigured sudo permissions.
This exploit leverages a static SSH key vulnerability in VMWare Aria Operations for Networks to achieve remote code execution. It iterates through a directory of SSH keys to attempt authentication as the 'support' user.
This PoC exploits CVE-2023-34039 by attempting SSH authentication with static keys for the 'support' user in VMWare Aria Operations for Networks (vRealize Network Insight) versions 6.0 to 6.10. Successful authentication grants a root shell due to improper key regeneration.
This PoC exploits CVE-2023-34039, a pre-authentication login bypass vulnerability. It attempts to authenticate via SSH using a set of private keys found in a 'keys' directory, targeting the 'support' user on port 22.
This PoC exploits CVE-2023-34039 by attempting SSH authentication with static private keys for the 'support' user in VMWare Aria Operations for Networks. Successful authentication grants a root shell due to improper key regeneration.
This Metasploit module exploits CVE-2023-34039 by leveraging known SSH private keys in VMWare Aria Operations for Networks (vRealize Network Insight) to gain unauthorized root access as the 'support' user. It attempts authentication using pre-defined private keys for various versions.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H