10

CVE-2015-6476

Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which makes it easier for remote attackers to obtain access via an SSH session.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Advantech ≫ Eki-1321 Series Firmware Version <= 1.96
   Advantech ≫ Eki-1321 Version-
   Advantech ≫ Eki-1322 Version-
Advantech ≫ Eki-1322 Series Firmware Version <= 1.96
   Advantech ≫ Eki-1321 Version-
   Advantech ≫ Eki-1322 Version-
Advantech ≫ Eki-1361 Series Firmware Version <= 1.17
   Advantech ≫ Eki-1361
   Advantech ≫ Eki-1362
Advantech ≫ Eki-1362 Series Firmware Version <= 1.17
   Advantech ≫ Eki-1361
   Advantech ≫ Eki-1362
Advantech ≫ Eki-122x Series Firmware Version <= 1.49
   Advantech ≫ Eki-1221 Version-
   Advantech ≫ Eki-1221d Version-
   Advantech ≫ Eki-1222 Version-
   Advantech ≫ Eki-1222d Version-
   Advantech ≫ Eki-1224 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.28% 0.487
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
https://ics-cert.us-cert.gov/advisories/ICSA-15-309-01
Third Party Advisory
US Government Resource