CVE-2016-1561

EPSS 74.3%

ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, which allows remote attackers to obtain SSH access by leveraging knowledge of a private key from another installation or a firmware image.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/136634/ExaGrid-Known-SSH-Key-Default-Password.htmlunverified exploitdbwww.exploit-db.com/exploits/41680unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.com/files/136634/ExaGrid-Known-SSH-Key-Default-Password.html https://community.rapid7.com/community/infosec/blog/2016/04/07/r7-2016-04-exagrid-backdoor-ssh-keys-and-hardcoded-credentials http://www.rapid7.com/db/modules/exploit/linux/ssh/exagrid_known_privkey