CVE-2019-19751

Medium

easyMINE before 2019-12-05 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes…

mitre·CWE-300·Published 2024-04-30

CVSS

5.6

EPSS

0.00

KEV

Exploits

cve.orgen

199 chars

easyMINE before 2019-12-05 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io.

NVDen

199 chars

easyMINE before 2019-12-05 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io.

easyMINE anterior al 05-12-2019 se distribuye con claves de host SSH integradas en la imagen de instalación, lo que permite ataques man-in-the-middle y trivializa la identificación de todos los nodos IPv4 públicos con Shodan.io.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.6	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
3.1	Primary	cve.org	5.6	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
3.1	Secondary	NVD	5.6	2.2	3.4	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L