Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation.

Summary

Aria Operations for Networks contains an Authentication Bypass vulnerability due to a lack of unique cryptographic key generation. A malicious actor with network access to Aria Operations for Networks could bypass SSH authentication to gain access to the Aria Operations for Networks CLI.

Timeline

1. Aug 29, 2023, 5:36 PM UTCCVE published
2. Feb 13, 2025, 4:55 PM UTCRecord last updated
3. Oct 28, 2026EPSS reached 10%

   FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

• n/a Aria Operations for Networks

  Aria Operations for Networks 6.x

References 10