VULNERABILITY INTELLIGENCE
CVE-2016-1560
CVSS score9.8 CRITICAL
EPSS probability72.29%
CISA KEVNot currently listed
Published2017-04-21
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session.
Weakness classification
- CWE-798: Use of Hard-coded Credentials
Primary references
- cret@cert.org — Exploit, Third Party Advisory, VDB Entry
- cret@cert.org — Third Party Advisory
- cret@cert.org — Exploit, Mitigation, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mitigation, Third Party Advisory