CVE-2020-5200

Minerbabe through V4.16 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all…

Medium · published April 30, 2024

CVSS v3.1
5.9
EPSS
0%
Percentile
6.6
In the wild
Unconfirmed
What it is

Minerbabe through V4.16 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00175 · 6.6th percentile
Published
2024-04-30T00:00Z
EPSS history
Timeline
  • 30 APR 00:00Z
    Minerbabe through V4.16 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all…
    cvelistv5