CVE-2016-1313 Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store a default SSH private key, which allows remote attackers to....
CriticalCVSS 9.8
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store a default SSH private key, which allows remote attackers to obtain root access via unspecified vectors, aka Bug ID CSCun71294.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ucs invicta c3124sa appliance | = 4.3.1 | No fix listed |
| cisco ucs invicta c3124sa appliance | = 4.5.0 | No fix listed |
| cisco ucs invicta c3124sa appliance | = 5.0.1 | No fix listed |
References
- 20160406 Cisco UCS Invicta Default SSH Key Vulnerability vendor-advisory
- 1035496 vdb-entry