VULNERABILITY INTELLIGENCE
CVE-2019-15015
CVSS score8.4 HIGH
EPSS probability0.36%
CISA KEVNot currently listed
Published2019-10-09
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
In the Zingbox Inspector, versions 1.294 and earlier, hardcoded credentials for root and inspector user accounts are present in the system software, which can result in unauthorized users gaining access to the system.
Weakness classification
- nvd@nist.gov: CWE-798
Primary references
- psirt@paloaltonetworks.com — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory