[Forgot Password]
Login  Register Subscribe

24128

 
 

131615

 
 

112965

 
 

909

 
 

87888

 
 

136

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2012-4577Date: (C)2012-08-21   (M)2018-02-19


The Linux firmware image on (1) Korenix Jetport 5600 series serial-device servers and (2) ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 10.0
Exploit Score: 10.0
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
BID-55196
http://ics-cert.us-cert.gov/advisories/ICSA-12-263-02
http://ics-cert.us-cert.gov/advisories/ICSA-12-297-02
http://www.digitalbond.com/2012/06/13/korenix-and-oring-insecurity
jetport-default-password(77992)

CPE    4
cpe:/h:korenix:jetport:5601
cpe:/h:korenix:jetport:5601f
cpe:/h:korenix:jetport:5604i
cpe:/h:korenix:jetport:5604
...
CWE    1
CWE-255

© SecPod Technologies