PT-2026-2433 · Fabricators · Vanilla Os 2 Core

Publicado 2026-01-13 · Atualizado 2026-02-10 · CVE-2024-54855

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Média

Vetor base

AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:H

Name of the Vulnerable Software and Affected Versions fabricators Ltd Vanilla OS 2 Core image version 1.1.0

Description The software contains static keys for the SSH service. This may allow attackers to execute a man-in-the-middle attack during connections with other hosts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-321

Identificadores relacionados

CVE-2024-54855

GHSA-67PC-HQR2-G34H

Produtos afetados

Vanilla Os 2 Core

Referências · 7

• https://github.com/Vanilla-OS/core-image/security/advisories/GHSA-67pc-hqr2-g34h · Aviso do Fabricante
• http://fabricators.com · Nota
• https://twitter.com/CVEnew/status/2011112409134477738 · Publicação no Twitter
• http://vanilla.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2024-54855 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2024-54855 · Aviso do Fabricante
• https://t.me/cveNotify/151608 · Publicação no Telegram