Monthly
Root-level SSH access to WolfVision vSolution Matrix appliances can be obtained by anyone holding the private key that matches the product's shared cryptographic trust configuration, allowing authentication as root on affected devices. Only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled are in scope, so the exposed population is a non-default subset rather than every deployment; the CVSS 4.0 vector (9.2) marks PR:N and UI:N, meaning no legitimate credentials or victim interaction are required once the key is in hand, while AT:P reflects that the key must first be acquired. No public exploit code or confirmed active exploitation appears in the supplied intelligence, but the vuln.today decision label is act_now and the shared nature of the trust material means one recovered key can potentially be replayed against multiple affected master stations.
Root-level SSH access to WolfVision vSolution Matrix appliances can be obtained by anyone holding the private key that matches the product's shared cryptographic trust configuration, allowing authentication as root on affected devices. Only devices configured as a vSolution Matrix main/master station with the file sharing feature enabled are in scope, so the exposed population is a non-default subset rather than every deployment; the CVSS 4.0 vector (9.2) marks PR:N and UI:N, meaning no legitimate credentials or victim interaction are required once the key is in hand, while AT:P reflects that the key must first be acquired. No public exploit code or confirmed active exploitation appears in the supplied intelligence, but the vuln.today decision label is act_now and the shared nature of the trust material means one recovered key can potentially be replayed against multiple affected master stations.