CVE-2019-19752

nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated plans to fix this in the next image build...

nvOC 安全漏洞

nvOC is a low-rate narrowband speech coding scheme from the individual developers at Payam Nab. A security vulnerability exists in nvOC 3.2 and earlier versions, which stems from the inclusion of an SSH host key in the included installation image, leading to the existence of a security...

CVE-2019-19752

The nvOC speech coding scheme (versions through 3.2 ) is vulnerable because SSH host keys are baked into the installation image. This hard-coded cryptographic key issue enables man-in-the-middle attacks and allows for the trivial identification of all public IPv4 nodes using Shodan.io . A proof-o...

PT-2024-10726

Name of the Vulnerable Software and Affected Versions nvOC versions 3.2 and earlier Description The issue allows man-in-the-middle attacks due to SSH host keys being baked into the installation image. This also makes it trivial to identify all public IPv4 nodes using Shodan.io. The vendor has...

CVE-2019-19752: Use of Hard-coded Cryptographic Key

nvOC through 3.2 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated plans to fix this in the next image build...