PT-2015-3064

CVE-2015-6476

·

Published

2015-11-07

·

Updated

2015-11-09

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Advantech EKI-122x-BE devices versions prior to 1.65 Advantech EKI-132x devices versions prior to 1.98 Advantech EKI-136x devices versions prior to 1.27
Description The issue is related to hardcoded SSH keys in the affected devices, making it easier for remote attackers to obtain access via an SSH session. This allows a remote attacker to gain access to the device by establishing an SSH connection.
Recommendations For Advantech EKI-122x-BE devices versions prior to 1.65, update the firmware to version 1.65 or later. For Advantech EKI-132x devices versions prior to 1.98, update the firmware to version 1.98 or later. For Advantech EKI-136x devices versions prior to 1.27, update the firmware to version 1.27 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾