CVE-2019-19752

nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated plans to fix this in the next image build...

CVE-2019-19752

The nvOC speech coding scheme (versions through 3.2 ) is vulnerable because SSH host keys are baked into the installation image. This hard-coded cryptographic key issue enables man-in-the-middle attacks and allows for the trivial identification of all public IPv4 nodes using Shodan.io . A proof-o...

PT-2024-10726

Name of the Vulnerable Software and Affected Versions nvOC versions 3.2 and earlier Description The issue allows man-in-the-middle attacks due to SSH host keys being baked into the installation image. This also makes it trivial to identify all public IPv4 nodes using Shodan.io. The vendor has...

nvOC security vulnerabilities

nvOC is a low-rate narrowband speech coding scheme from the individual developers at Payam Nab. A security vulnerability exists in nvOC 3.2 and earlier versions, which stems from the inclusion of an SSH host key in the included installation image, leading to the existence of a security...

CVE-2019-19752: Use of Hard-coded Cryptographic Key

nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated plans to fix this in the next image build...