CVE-2016-1560

Critical

Published: 21/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

ExaGrid appliances with firmware before version 4.8 P26 have a default password (1) inflection for the root account and (2) support for the support account in the web interface, allowing remote attackers to gain administrative access via an SSH or HTTP session.

Risk Assessment

The risk to the organization is that remote attackers can gain full access to the system, potentially leading to serious data security breaches.

Recommendation

It is recommended to update the firmware to version 4.8 P26 or later and to change the default passwords for administrative accounts.

Original NVD description (English source)

ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session.