Vulnerabilities

TI-2019-09182 CVE-2019-12310 · GHSA-cjwj-vcph-67rf

ExaGrid appliances with firmware version v4.8.1.1044.P50 have a /monitor/data/Upgrade/…

MEDIUM 48

ExaGrid appliances with firmware version v4.8.1.1044.P50 have a /monitor/data/Upgrade/ directory traversal vulnerability, which allows remote attackers to view and retrieve verbose logging information.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03254 Published 2019-06-03 No fix listed CWE-22

TI-2016-01422 CVE-2016-1561 · GHSA-cwr4-jwc3-f83j

ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the…

HIGH 71

ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, which allows remote attackers to obtain SSH access by leveraging knowledge of a private key from another…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.74435 Published 2017-04-21 No fix listed CWE-200

TI-2016-01421 CVE-2016-1560 · GHSA-qm78-gh66-mx93

ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection…

HIGH 80

ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain a…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.72289 Published 2017-04-21 No fix listed CWE-798

Vulnerabilities

Filters

ExaGrid appliances with firmware version v4.8.1.1044.P50 have a /monitor/data/Upgrade/…

ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the…

ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection…