CVE-2016-1560

EPSS 72.3%

Vexday Risk Score

60Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 72.3%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Lifecycle

07 Apr 2016Metasploit module available

07 Apr 2016Public PoC

21 Apr 2017Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencepacketstormsecurity.com/files/136634/ExaGrid-Known-SSH-Key-Default-Password.htmlunverified exploitdbwww.exploit-db.com/exploits/41680unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://packetstormsecurity.com/files/136634/ExaGrid-Known-SSH-Key-Default-Password.html https://community.rapid7.com/community/infosec/blog/2016/04/07/r7-2016-04-exagrid-backdoor-ssh-keys-and-hardcoded-credentials http://www.rapid7.com/db/modules/exploit/linux/ssh/exagrid_known_privkey