EUVD-2019-3947

Malware in sbrugna...

ExaGrid appliances path traversal vulnerability

ExaGrid appliances is a disk backup application. A path traversal vulnerability exists in ExaGrid appliances using firmware version 4.8.1.1044.P50. The vulnerability stems from the failure of a networked system or product to properly filter for special elements in a resource or file path. An...

CVE-2019-12310

ExaGrid appliances with firmware version v4.8.1.1044.P50 have a /monitor/data/Upgrade/ directory traversal vulnerability, which allows remote attackers to view and retrieve verbose logging information. Files within this directory were observed to contain sensitive run-time information, including...

CVE-2019-12310: Improper Limitation of a Pathname to a Restricted Directory

ExaGrid appliances with firmware version v4.8.1.1044.P50 have a /monitor/data/Upgrade/ directory traversal vulnerability, which allows remote attackers to view and retrieve verbose logging information. Files within this directory were observed to contain sensitive run-time information, including...

PT-2019-12745

Name of the Vulnerable Software and Affected Versions ExaGrid appliances version v4.8.1.1044.P50 Description The issue allows remote attackers to view and retrieve verbose logging information due to a directory traversal vulnerability in the /monitor/data/Upgrade/ directory. This vulnerability ca...

CVE-2016-1560

ExaGrid appliances with firmware before 4.8 P26 have a default password of 1 inflection for the root shell account and 2 support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session...

Design/Logic Flaw

ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorizedkeys file for root, which allows remote attackers to obtain SSH access by leveraging knowledge of a private key from another installation or a firmware image...

CVE-2016-1561

ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorizedkeys file for root, which allows remote attackers to obtain SSH access by leveraging knowledge of a private key from another installation or a firmware image...

CVE-2016-1561

ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorizedkeys file for root, which allows remote attackers to obtain SSH access by leveraging knowledge of a private key from another installation or a firmware image. Recent assessments: h00die at March 24, 202...

CVE-2016-1561: Exposure of Sensitive Information to an Unauthorized Actor

ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorizedkeys file for root, which allows remote attackers to obtain SSH access by leveraging knowledge of a private key from another installation or a firmware image...

CVE-2016-1560: Use of Hard-coded Credentials

ExaGrid appliances with firmware before 4.8 P26 have a default password of 1 inflection for the root shell account and 2 support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session...

PT-2016-3201

Name of the Vulnerable Software and Affected Versions ExaGrid appliances with firmware before 4.8 P26 Description The issue is related to the use of default credentials in ExaGrid backup devices' firmware. Exploitation of this issue may allow a remote attacker to gain root access to the device...