ID:9390 - Exploit for Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Aria Operations for Networks (formerly vRealize Network Insight) - CVE-2023-34039

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to a lack of unique cryptographic key generation. A remote attacker can bypass SSH authentication and gain unauthorized access to the system.

Remediation