{"uuid": "f255210c-ea0e-45ad-8a92-20991bf32c86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-34039", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/vmware_vrni_known_privkey.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"h00die\", \"SinSinology\", \"Harsh Jaiswal ( \", \"Rahul Maini ( \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"VMWare Aria Operations for Networks (vRealize Network Insight) versions 6.0.0 through 6.10.0\\n            do not randomize the SSH keys on virtual machine initialization. Since the key is easily\\n            retrievable, an attacker can use it to gain unauthorized remote access as the \\\"support\\\" (root) user.\", \"disclosure_date\": \"2023-08-29\", \"fullname\": \"exploit/linux/ssh/vmware_vrni_known_privkey\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"VMWare Aria Operations for Networks (vRealize Network Insight) SSH Private Key Exposure\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/ssh/vmware_vrni_known_privkey.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/ssh/vmware_vrni_known_privkey\", \"references\": [\"CVE-2023-34039\", \"URL-https://github.com/sinsinology/CVE-2023-34039\", \"URL-https://summoning.team/blog/vmware-vrealize-network-insight-rce-cve-2023-34039/\", \"URL-https://www.vmware.com/security/advisories/VMSA-2023-0018.html\", \"ATT&CK-T1021.004\"], \"rport\": 22, \"session_types\": false, \"targets\": [\"6.0_platform\", \"6.0_proxy\", \"6.1_platform\", \"6.1_proxy\", \"6.2_collector\", \"6.2_platform\", \"6.3_collector\", \"6.3_platform\", \"6.4_collector\", \"6.4_platform\", \"6.5_collector\", \"6.5_platform\", \"6.6_collector\", \"6.6_platform\", \"6.7_collector\", \"6.7_platform\", \"6.8_collector\", \"6.8_platform\", \"6.9_collector\", \"6.9_platform\", \"6.10_collector\", \"6.10_platform\", \"All\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:24.815426Z"}