CVE-2015-8362

Critical

Published: 22/01/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2015-10-12 has a hardcoded password for the BlackWidow account, making it easier for remote attackers to gain access via SSH or HTTP sessions.

Risk Assessment

This vulnerability poses a risk of unauthorized access to devices, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to remove the hardcoded password and implement strong authentication mechanisms for user accounts.

Original NVD description (English source)

The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2015-10-12 has a hardcoded password for the BlackWidow account, which makes it easier for remote attackers to obtain access via a (1) SSH or (2) HTTP session, a different vulnerability than CVE-2016-1984.