CVE-2025-30234: High severity SmartOS SmartOS vulnerability
Published Mar 19, 2025
·Updated
SmartOS, as used in Triton Data Center and other products, has static host SSH keys in the 60f76fd2-143f-4f57-819b-1ae32684e81b image (a Debian 12 LX zone image from 2024-07-26).
Affected Software
2 affected components
SmartOS SmartOS
SmartOS Triton Data Center
Event History
Mar 19, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 AM
DescriptionSeverityWeakness
Mar 15, 57195
Event
via FIRST·08:48 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-30234?
CVE-2025-30234 has a medium severity rating due to the exposure of static host SSH keys.
2
How do I fix CVE-2025-30234?
To mitigate CVE-2025-30234, you should replace the static SSH host keys with dynamically generated keys.
3
What products are affected by CVE-2025-30234?
CVE-2025-30234 affects SmartOS and Triton Data Center implementations using specific Debian LX zone images.
4
What is the impact of CVE-2025-30234?
The impact of CVE-2025-30234 includes potential unauthorized access to systems using the exposed SSH keys.
5
Is there a workaround for CVE-2025-30234?
A temporary workaround for CVE-2025-30234 includes auditing your SSH key management and rotating keys regularly until a full fix is implemented.