CVE-2023-37426

Summary

CVE-2023-37426 is a vulnerability affecting EdgeConnect SD-WAN Orchestrator instances. These devices were found to use shared static SSH host keys across all installations. An attacker who exploits this vulnerability could spoof the SSH host signature and masquerade as a legitimate Orchestrator host, potentially gaining unauthorized access and compromising network security. This issue has been resolved in updated versions, and administrators are advised to apply these patches as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.