CVE-2016-1560 ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote a...
CriticalCVSS 9.8
EPSS 72.3%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| exagrid ex3000 firmware | = 4.8 | No fix listed |
| exagrid ex5000 firmware | = 4.8 | No fix listed |
| exagrid ex7000 firmware | = 4.8 | No fix listed |
| exagrid ex10000e firmware | = 4.8 | No fix listed |
| exagrid ex13000e firmware | = 4.8 | No fix listed |
| exagrid ex21000e firmware | = 4.8 | No fix listed |
| exagrid ex32000e firmware | = 4.8 | No fix listed |
| exagrid ex40000e firmware | = 4.8 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- www.rapid7.com third-party-advisory
- community.rapid7.com exploit mitigation third-party-advisory