CVE-2015-6476
Published Nov 7, 2015
Last updated 9 years ago
Overview
- Description
- Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which makes it easier for remote attackers to obtain access via an SSH session.
- Source
- ics-cert@hq.dhs.gov
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Social media
- Hype score
- Not currently trending
Evaluator
- Comment
- <a href="http://cwe.mitre.org/data/definitions/798.html" target="_blank">CWE-798: Use of Hard-coded Credentials</a>
- Impact
- -
- Solution
- -
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:advantech:eki-1321_series_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1890F2BC-F142-416F-849C-2E373A06FCA3",
"versionEndIncluding": "1.96"
},
{
"criteria": "cpe:2.3:o:advantech:eki-1322_series_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE9EAB7C-D317-4CDD-889B-AA421DF76694",
"versionEndIncluding": "1.96"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:advantech:eki-1321:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6D7B68EA-F9AD-4CC6-BAFA-B5129EEFE856"
},
{
"criteria": "cpe:2.3:h:advantech:eki-1322:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8A27AED1-8435-4E68-98B7-22E2ECE6174D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:advantech:eki-1361_series_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F301098-8128-4926-90D6-0190964891D8",
"versionEndIncluding": "1.17"
},
{
"criteria": "cpe:2.3:o:advantech:eki-1362_series_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35F5689B-F1D2-400D-8DD5-C9DD5AAE72F4",
"versionEndIncluding": "1.17"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:advantech:eki-1361:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "925AC192-E081-450A-BFB4-73CF9728E22C"
},
{
"criteria": "cpe:2.3:h:advantech:eki-1362:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "21ED3DFA-0A24-412F-ABDC-8C23893DAB37"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:advantech:eki-122x_series_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8217E10B-54CA-4664-A721-9CBA23A23F2B",
"versionEndIncluding": "1.49"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:advantech:eki-1221:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "519A0B53-DACF-46FD-B52C-8691B931F6DA"
},
{
"criteria": "cpe:2.3:h:advantech:eki-1221d:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2BCC7BB2-333E-4C90-A2DE-81C9017AFD3F"
},
{
"criteria": "cpe:2.3:h:advantech:eki-1222:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "23B86996-68E7-4314-8F28-2B275AFD3576"
},
{
"criteria": "cpe:2.3:h:advantech:eki-1222d:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "205149C4-040E-4F2C-A0B8-B39EE42CB70B"
},
{
"criteria": "cpe:2.3:h:advantech:eki-1224:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3F74E576-4E04-48B0-8031-5F80E59EBFCE"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]