9.8crit
CVE-2016-1560in critical feed2 exploits
ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for th…
Published 9 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
72.3%
percentile 99%
Public exploits
2
Metasploit · Exploit-DB
Summary
ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session.
Exploit prediction (EPSS)
72.29% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.
Exploits and detections
- Metasploit exploit/linux/ssh/exagrid_known_privkey ExaGrid Known SSH Key and Default Password · metasploit exploit, excellent rank · 2016-04-07
- EDB-41680 ExaGrid - Known SSH Key and Default Password (Metasploit) · remote · 2016-04-07
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 9.8 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
- CWE-798 Use of Hard-coded Credentials
References
- packetstormsecurity.com /files/136634/ExaGrid-Known-SSH-Key-Default-Password.html · x_refsource_MISC, x_transferred
- community.rapid7.com /community/infosec/blog/2016/04/07/r7-2016-04-exagrid-backdoor-ssh-keys-and-hardcoded-cred · x_refsource_MISC, x_transferred
- rapid7.com /db/modules/exploit/linux/ssh/exagrid_known_privkey · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2016-1560
- NVD: CVE-2016-1560
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.