CVE-2024-54855

Published: Jan 13, 2026Modified: Jul 5, 2026

6.4

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:H

Exploitability: 0.9 / Impact: 5.5

Source: NVD

Description

fabricators Ltd Vanilla OS 2 Core image v1.1.0 was discovered to contain static keys for the SSH service, allowing attackers to possibly execute a man-in-the-middle attack during connections with other hosts.

Affected (1)

Products: Fabricators: Vanilla Os Core Image

Fabricators

1 product

Vanilla Os Core Image

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Fabricators Vanilla Os Core Image	Before 1.1.1

Related CWEs

CWE-321

Use of Hard-coded Cryptographic Key

The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.

References (1)

https://github.com/Vanilla-OS/core-image/security/advisories/GHSA-67pc-hqr2-g34h

Source: cve@mitre.org

ExploitVendor Advisory

Timeline

No history available yet.