CVE-2016-1313

Critical

Published: 06/04/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Cisco UCS Invicta C3124SA devices from versions 4.3.1 to 5.0.1, UCS Invicta Scaling System, and Whiptail Racerunner improperly store a default SSH private key. This allows remote attackers to gain root access via unspecified vectors.

Risk Assessment

This vulnerability poses a serious security risk as it allows attackers to remotely take control of the device, potentially leading to data loss or system compromise.

Recommendation

It is recommended to immediately change the default SSH private key and update the devices to the latest software version to minimize risk.

Original NVD description (English source)

Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store a default SSH private key, which allows remote attackers to obtain root access via unspecified vectors, aka Bug ID CSCun71294.