VULNERABILITY INTELLIGENCE

CVE-2024-54855

CVSS score6.4 MEDIUM
EPSS probability0.31%
CISA KEVNot currently listed
Published2026-01-13
Last modified2026-07-05
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:H

Description

fabricators Ltd Vanilla OS 2 Core image v1.1.0 was discovered to contain static keys for the SSH service, allowing attackers to possibly execute a man-in-the-middle attack during connections with other hosts.

Weakness classification

  • CWE-321: Use of Hard-coded Cryptographic Key

Primary references