PT-2025-38730 · Unknown · Aikaan Cloud Controller

Published 2025-09-22 · Updated 2025-09-22 · CVE-2025-57601

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AiKaan Cloud Controller (affected versions not specified)

Description The AiKaan Cloud Controller utilizes a single, hardcoded SSH private key and the username proxyuser for remote terminal access to all managed IoT/edge devices. When an administrator initiates a "Open Remote Terminal" action, the controller transmits this static private key to the target device. The device then establishes a reverse SSH tunnel to a remote access server, enabling browser-based SSH access. The reuse of the same proxyuser account and SSH key across all customer environments allows an attacker who obtains the key to impersonate any managed device and establish unauthorized reverse SSH tunnels. This represents a design flaw in the authentication model where compromise of a single key compromises the trust boundary between the controller and devices.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2025-57601

Affected Products

Aikaan Cloud Controller

References · 3

• 🔥 https://github.com/Shubhangborkar/aikaan-vulnerabilities/blob/main/cve1-shared-ssh-key.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-57601 · Security Note
• https://twitter.com/CVEnew/status/1970153792839496023 · Twitter Post