CVE-2016-1313

Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store a default SSH private key, which allows remote attackers to obtain root access via unspecified vectors, aka Bug ID CSCun71294.

Score

CVSS 3.0 9.8 Critical

Status

Modified - psirt@cisco.com

Published

2016-04-06

Last modified

2024-08-05

Weaknesses

CWE-264

Affected products

• Ucs Invicta C3124sa Appliance (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-ucs
• http://www.securitytracker.com/id/1035496