CVE-2016-1560

CRITICAL 9.8CVE-2016-1560 · Published 21/04/2017 · updated 17/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session.

References

packetstormsecurity.com/files/136634/ExaGrid-Known-SSH-Key-Default-Password.html · Exploit
rapid7.com/db/modules/exploit/linux/ssh/exagrid_known_privkey · Third Party Advisory
community.rapid7.com/community/infosec/blog/2016/04/07/r7-2016-04-exagrid-backdoor-ssh-keys-and-hardcoded-credentials · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free