Unscored CVE-2016-1313 EUVD-2016-2412GHSA-gccx-g2pg-5r7x

Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store…

Published Apr 6, 2016 · Updated Aug 5, 2024 · Assigned by cisco

Description

Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store a default SSH private key, which allows remote attackers to obtain root access via unspecified vectors, aka Bug ID CSCun71294.

References

1035496 vdb-entry
20160406 Cisco UCS Invicta Default SSH Key Vulnerability vendor-advisory