Details of VAR-201704-0308

ID

VAR-201704-0308

CVE

CVE-2016-1560

TITLE

ExaGrid Vulnerabilities that can gain management access in appliance firmware

Trust: 0.8

sources: JVNDB: JVNDB-2016-008502

DESCRIPTION

ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session. ExaGrid is prone to multiple unauthorized-access vulnerabilities. Successfully exploiting these issues may allow an attacker to gain unauthorized access, obtain sensitive information and perform unauthorized actions; This may lead to other attacks. ExaGrid is a backup and recovery storage device based on the Linux platform of ExaGrid Company of the United States that provides deduplication function. ExaGrid appliances using firmware versions prior to 4.8 P26 have a security vulnerability

Trust: 2.07

sources: NVD: CVE-2016-1560 // JVNDB: JVNDB-2016-008502 // BID: 86020 // VULHUB: VHN-90379 // VULMON: CVE-2016-1560

AFFECTED PRODUCTS

vendor:	exagrid	model:	ex10000e	scope:	eq	version:	4.8	Trust: 2.4
vendor:	exagrid	model:	ex13000e	scope:	eq	version:	4.8	Trust: 2.4
vendor:	exagrid	model:	ex21000e	scope:	eq	version:	4.8	Trust: 2.4
vendor:	exagrid	model:	ex3000	scope:	eq	version:	4.8	Trust: 2.4
vendor:	exagrid	model:	ex32000e	scope:	eq	version:	4.8	Trust: 2.4
vendor:	exagrid	model:	ex40000e	scope:	eq	version:	4.8	Trust: 2.4
vendor:	exagrid	model:	ex5000	scope:	eq	version:	4.8	Trust: 2.4
vendor:	exagrid	model:	ex7000	scope:	eq	version:	4.8	Trust: 2.4

sources: JVNDB: JVNDB-2016-008502 // CNNVD: CNNVD-201604-168 // NVD: CVE-2016-1560

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-1560
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2016-1560
value:	CRITICAL
Trust: 0.8
CNNVD:	CNNVD-201604-168
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-90379
value:	HIGH
Trust: 0.1
VULMON:	CVE-2016-1560
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2016-1560
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
VULHUB:	VHN-90379
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2016-1560
baseSeverity:	CRITICAL
baseScore:	9.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-90379 // VULMON: CVE-2016-1560 // JVNDB: JVNDB-2016-008502 // CNNVD: CNNVD-201604-168 // NVD: CVE-2016-1560

PROBLEMTYPE DATA

problemtype:

CWE-798

Trust: 1.9

sources: VULHUB: VHN-90379 // JVNDB: JVNDB-2016-008502 // NVD: CVE-2016-1560

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201604-168

TYPE

lack of information

Trust: 0.6

sources: CNNVD: CNNVD-201604-168

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-008502

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-90379 // VULMON: CVE-2016-1560

PATCH

title:

Top Page

url:

http://www.exagrid.com/

Trust: 0.8

sources: JVNDB: JVNDB-2016-008502

EXTERNAL IDS

db:	NVD	id:	CVE-2016-1560	Trust: 2.9
db:	PACKETSTORM	id:	136634	Trust: 2.6
db:	JVNDB	id:	JVNDB-2016-008502	Trust: 0.8
db:	CNNVD	id:	CNNVD-201604-168	Trust: 0.7
db:	BID	id:	86020	Trust: 0.4
db:	EXPLOIT-DB	id:	41680	Trust: 0.2
db:	VULHUB	id:	VHN-90379	Trust: 0.1
db:	VULMON	id:	CVE-2016-1560	Trust: 0.1

sources: VULHUB: VHN-90379 // VULMON: CVE-2016-1560 // BID: 86020 // JVNDB: JVNDB-2016-008502 // CNNVD: CNNVD-201604-168 // NVD: CVE-2016-1560

REFERENCES

url:	http://packetstormsecurity.com/files/136634/exagrid-known-ssh-key-default-password.html	Trust: 2.6
url:	http://www.rapid7.com/db/modules/exploit/linux/ssh/exagrid_known_privkey	Trust: 1.9
url:	https://community.rapid7.com/community/infosec/blog/2016/04/07/r7-2016-04-exagrid-backdoor-ssh-keys-and-hardcoded-credentials	Trust: 1.8
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-1560	Trust: 0.8
url:	https://nvd.nist.gov/vuln/detail/cve-2016-1560	Trust: 0.8
url:	https://cwe.mitre.org/data/definitions/798.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://www.securityfocus.com/bid/86020	Trust: 0.1
url:	https://www.exploit-db.com/exploits/41680/	Trust: 0.1

sources: VULHUB: VHN-90379 // VULMON: CVE-2016-1560 // JVNDB: JVNDB-2016-008502 // CNNVD: CNNVD-201604-168 // NVD: CVE-2016-1560

CREDITS

egypt

Trust: 0.6

sources: CNNVD: CNNVD-201604-168

SOURCES

db:	VULHUB	id:	VHN-90379
db:	VULMON	id:	CVE-2016-1560
db:	BID	id:	86020
db:	JVNDB	id:	JVNDB-2016-008502
db:	CNNVD	id:	CNNVD-201604-168
db:	NVD	id:	CVE-2016-1560

LAST UPDATE DATE

2024-11-23T22:01:11.817000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-90379	date:	2017-04-27T00:00:00
db:	VULMON	id:	CVE-2016-1560	date:	2017-04-27T00:00:00
db:	BID	id:	86020	date:	2016-04-06T00:00:00
db:	JVNDB	id:	JVNDB-2016-008502	date:	2017-05-25T00:00:00
db:	CNNVD	id:	CNNVD-201604-168	date:	2017-04-21T00:00:00
db:	NVD	id:	CVE-2016-1560	date:	2024-11-21T02:46:38.407

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-90379	date:	2017-04-21T00:00:00
db:	VULMON	id:	CVE-2016-1560	date:	2017-04-21T00:00:00
db:	BID	id:	86020	date:	2016-04-06T00:00:00
db:	JVNDB	id:	JVNDB-2016-008502	date:	2017-05-25T00:00:00
db:	CNNVD	id:	CNNVD-201604-168	date:	2016-04-11T00:00:00
db:	NVD	id:	CVE-2016-1560	date:	2017-04-21T20:59:00.447