CVE-2012-4577

Name of the Vulnerable Software and Affected Versions Korenix Jetport 5600 series (affected versions not specified) ORing Industrial DIN-Rail serial-device servers (affected versions not specified)

Description The issue concerns a hardcoded password in the Linux firmware image. Specifically, the root account has a hardcoded password of password, allowing remote attackers to gain administrative access via an SSH session.

Recommendations For Korenix Jetport 5600 series, change the hardcoded password for the root account as soon as possible. For ORing Industrial DIN-Rail serial-device servers, update the firmware to remove or change the hardcoded password for the root account. At the moment, there is no information about a newer version that contains a fix for this vulnerability.