CVE-2012-4702

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-03-11 · updated 2026-06-16
Weakness: CWE-255

Description

360 Systems Maxx, Image Server Maxx, and Image Server 2000 have a hardcoded password for the root account, which makes it easier for remote attackers to execute arbitrary code, or modify video content or scheduling, via an SSH session.

Affected products

360Systems Image Server 2000: all versions
360Systems Image Server Maxx: all versions
360Systems Maxx: all versions

References

http://ics-cert.us-cert.gov/pdf/ICSA-13-038-01A.pdf
http://ics-cert.us-cert.gov/pdf/ICSA-13-038-01A.pdf

Get alerted when CVE-2012-4702 or the next vulnerability affects your stack