Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-12776
HistoryJun 07, 2019 - 4:29 p.m.

Hardcoded credentials

2019-06-0716:29:00
PRIOn knowledge base
www.prio-n.com
4

9.6 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.7%

An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044_update_05032019-482. They include a hard-coded SSH backdoor for remote SSH and SCP access as the root user. A command in the relocate and relocate_revB scripts copies the hardcoded key to the root user’s authorized_keys file, enabling anyone with the associated private key to gain remote root access to all affected products.

9.6 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.7%

Related for PRION:CVE-2019-12776