CVE-2016-1560 | BDVDB-2026-84491 Detail

Description#

ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://packetstormsecurity.com/files/136634/ExaGrid-Known-SSH-Key-Default-Password.html
https://community.rapid7.com/community/infosec/blog/2016/04/07/r7-2016-04-exagrid-backdoor-ssh-keys-and-hardcoded-credentials
http://www.rapid7.com/db/modules/exploit/linux/ssh/exagrid_known_privkey

Exploit#

No public exploit known

History#

Version 12017-04-21Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.