What’s Vulnerable › Vulnerabilities

CVE-2016-7456

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 32.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2016-12-29 · updated 2026-06-17
• Weakness: CWE-255

Description

VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access via an SSH session.

Affected products

• VMware vSphere Data Protection (VDP): 5.5.1, 5.5.5, 5.5.6, 5.5.7, 5.5.8, 5.5.9 (+16)

References

• http://www.securityfocus.com/bid/94990
• http://www.securitytracker.com/id/1037502
• http://www.vmware.com/security/advisories/VMSA-2016-0024.html
• http://www.securityfocus.com/bid/94990
• http://www.securitytracker.com/id/1037502
• http://www.vmware.com/security/advisories/VMSA-2016-0024.html

Get alerted when CVE-2016-7456 or the next vulnerability affects your stack