CVE-2016-1313

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-04-06 · updated 2026-06-17
Weakness: CWE-264

Description

Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store a default SSH private key, which allows remote attackers to obtain root access via unspecified vectors, aka Bug ID CSCun71294.

Affected products

Cisco Ucs Invicta C3124Sa Appliance: 4.3.1, 4.5.0, 5.0.1

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-ucs
http://www.securitytracker.com/id/1035496
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-ucs
http://www.securitytracker.com/id/1035496

Get alerted when CVE-2016-1313 or the next vulnerability affects your stack