CVE-2016-1561

ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, which allows remote attackers to obtain SSH access by leveraging knowledge of a private key from another installation or a firmware image.

Published: Apr 21, 2017
Updated: Apr 13, 2023
CVE: CVE-2016-1561
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

CWEs:

CWE-200

Affected Software
References

Software	From	Fixed in
exagrid / ex3000_firmware	4.8	4.8.x
exagrid / ex5000_firmware	4.8	4.8.x
exagrid / ex7000_firmware	4.8	4.8.x
exagrid / ex10000e_firmware	4.8	4.8.x
exagrid / ex13000e_firmware	4.8	4.8.x
exagrid / ex21000e_firmware	4.8	4.8.x
exagrid / ex32000e_firmware	4.8	4.8.x
exagrid / ex40000e_firmware	4.8	4.8.x

http://packetstormsecurity.com/files/136634/ExaGrid-Known-SSH-Key-Default-Password.html
http://www.rapid7.com/db/modules/exploit/linux/ssh/exagrid_known_privkey
https://community.rapid7.com/community/infosec/blog/2016/04/07/r7-2016-04-exagrid-backdoor-ssh-keys-and-hardcoded-credentials

Vulnerability Database

CVE-2016-1561

Deep Security Visibility Without the Complexity