CVE-2023-34039

CVE-2023-34039 is a critical Authentication Bypass vulnerability in VMware Aria Operations for Networks, stemming from a lack of unique cryptographic key generation. This flaw allows an unauthenticated attacker with network access to bypass SSH authentication and gain full access to the CLI. With a CVSS score of 9.8 (CRITICAL) and an EPSS score indicating high exploitability, this vulnerability poses a severe risk, enabling complete compromise of confidentiality, integrity, and availability. Exploit code, including a Metasploit module, has been publicly released, and the vulnerability has garnered significant community attention and media coverage, indicating a high likelihood of active exploitation.