CVEvulnerability

CVE-2015-6476

10.0 HIGH Published 2015-11-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2015-11-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which makes it easier for remote attackers to obtain access via an SSH session.

Affected configurations

• advantech eki-1321 series firmware (<= 1.96) • advantech eki-1322 series firmware (<= 1.96) • advantech eki-1361 series firmware (<= 1.17) • advantech eki-1362 series firmware (<= 1.17) • advantech eki-122x series firmware (<= 1.49)

References