Login Request a demo
Unscored severity · published Nov 7, 2015
CVE-2015-6476
Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which makes it easier for remote attackers to obtain access via an SSH session.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
Eki-122x Series Firmware · Advantech
through 1.49 · source: NVD
ES
Eki-1321 Series Firmware · Advantech
through 1.96 · source: NVD
ES
Eki-1322 Series Firmware · Advantech
through 1.96 · source: NVD
ES
Eki-1361 Series Firmware · Advantech
through 1.17 · source: NVD
ES
Eki-1362 Series Firmware · Advantech
through 1.17 · source: NVD
Affected product
ES
Eki-122x Series Firmware
Advantech
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-6476
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-6476
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-15-309-01