CVE-2016-1560

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 72.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-04-21 · updated 2026-06-17
Weakness: CWE-798

Description

ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session.

Affected products

Exagrid Ex10000E Firmware: 4.8
Exagrid Ex13000E Firmware: 4.8
Exagrid Ex21000E Firmware: 4.8
Exagrid Ex3000 Firmware: 4.8
Exagrid Ex32000E Firmware: 4.8
Exagrid Ex40000E Firmware: 4.8
Exagrid Ex5000 Firmware: 4.8
Exagrid Ex7000 Firmware: 4.8

References

http://packetstormsecurity.com/files/136634/ExaGrid-Known-SSH-Key-Default-Password.html
http://www.rapid7.com/db/modules/exploit/linux/ssh/exagrid_known_privkey
https://community.rapid7.com/community/infosec/blog/2016/04/07/r7-2016-04-exagrid-backdoor-ssh-keys-and-hardcoded-credentials
http://packetstormsecurity.com/files/136634/ExaGrid-Known-SSH-Key-Default-Password.html
http://www.rapid7.com/db/modules/exploit/linux/ssh/exagrid_known_privkey
https://community.rapid7.com/community/infosec/blog/2016/04/07/r7-2016-04-exagrid-backdoor-ssh-keys-and-hardcoded-credentials

Get alerted when CVE-2016-1560 or the next vulnerability affects your stack