Hardcoded credentials

2012-08-2022:55:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.8%

JSON

hydra.exe in HP SAN/iQ before 9.5 on the HP Virtual SAN Appliance has a hardcoded password of L0CAlu53R for the global$agent account, which allows remote attackers to obtain access to a management service via a login: request to TCP port 13838.

CPENameOperatorVersion
san\\/iqeq9.5

CPE	Name	Operator	Version
	san\\/iq	eq	9.5

References

www.kb.cert.org/vuls/id/441363

www.exploit-db.com/exploits/18893/

www.exploit-db.com/exploits/18901/