CyberRota Analysis
AI-GeneratedThe SSH service on BSH ELP modules is vulnerable due to an insecure default configuration that includes a non-revocable SSH public key in the root user's authorized_keys file. This flaw allows an attacker with the corresponding private key to bypass authentication and gain root-level access to the appliance, posing a significant security risk. Organizations using BSH ELP modules should prioritize remediation to prevent potential exploitation.
Original NVD Description
The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorized_keys file for the root user. An attacker in possession of the corresponding private key could leverage it to bypass authentication and gain root-level access to the appliance.