Back to Database
Status published
Critical
CVE-2016-1560
ExaGrid appliances with firmware before 4.8 P26 have a default...
Vulnerability Description
ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-1560
Credits & Attribution
No credits recorded in the NVD database.
References
Affected Vendor
exagrid
View all reports →Affected Software
ex3000 firmware, ex5000 firmware, ex7000 firmware, ex10000e firmware, ex13000e firmware, ex21000e firmware, ex32000e firmware, ex40000e firmware
Vulnerable Versions:
4.8
Timeline
Official Publish:
April 21st, 2017
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.