SMA Technologies OpCon UNIX agent adds the same SSH key to all installations

ronjor · Jun 22, 2022

Vulnerability Note VU#142546
Original Release Date: 2022-06-21 | Last Revised: 2022-06-21

Overview
SMA Technologies OpCon UNIX agent adds the same SSH key on every installation and subsequent updates. An attacker with access to the private key can gain root access on affected systems.
Click to expand...

Solution
Remove private key
SMA Technologies has provided a tool to address the issue.
Click to expand...

Log in or Sign up

SMA Technologies OpCon UNIX agent adds the same SSH key to all installations

ronjor Global Moderator

Log in or Sign up

SMA Technologies OpCon UNIX agent adds the same SSH key to all installations

ronjor Global Moderator

Useful Searches