CVE-2016-2362

Critical

Published: 20/06/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Fonality (previously trixbox Pro) versions 12.6 through 14.1i before 2016-06-01 has a hardcoded password for the FTP account, allowing remote attackers to gain access via FTP or SSH connection.

Risk Assessment

The risk is that remote attackers can gain unauthorized access to the system, potentially leading to data theft or system takeover.

Recommendation

It is recommended to update the software to the latest version to remove the hardcoded password and implement strong passwords for user accounts.

Original NVD description (English source)

Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 has a hardcoded password for the FTP account, which allows remote attackers to obtain access via a (1) FTP or (2) SSH connection.