CVE-2016-1560
Critical
Description
ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session.
SeverityCritical
CVSS9.8
Exploit probability—
ProductExagrid Ex3000 Firmware
PublishedApr 21, 2017
First seenApr 21, 2017
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| exagrid ex3000_firmware | 4.8 | — |
| exagrid ex5000_firmware | 4.8 | — |
| exagrid ex7000_firmware | 4.8 | — |
| exagrid ex10000e_firmware | 4.8 | — |
| exagrid ex13000e_firmware | 4.8 | — |
| exagrid ex21000e_firmware | 4.8 | — |
| exagrid ex32000e_firmware | 4.8 | — |
| exagrid ex40000e_firmware | 4.8 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.