CyberRota Analysis
AI-GeneratedNVIDIA NVOS for network switches is vulnerable due to a misconfiguration in the SSH server when PKA-only mode is enabled, potentially allowing unauthorized access if default password replacement practices are not adhered to. Exploiting this vulnerability could lead to privilege escalation, posing significant risks to network security. Organizations using NVIDIA NVOS should prioritize addressing this issue to safeguard against potential breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration component while PKA-only mode is enabled, where an administrator could inadvertently enable an alternative authentication path. If best practices for replacing the default password as recommended by NVIDIA are not followed, this alternative authentication path might lead to unauthorized access. A successful exploit of this vulnerability might lead to escalation of privileges.