« Volver al listado

CVE-2015-6476

Estado: ModificadaAlta (10)—

Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which makes it easier for remote attackers to obtain access via an SSH session.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (5)

Advantech — Eki-122x Series FirmwareAdvantech — Eki-1321 Series FirmwareAdvantech — Eki-1322 Series FirmwareAdvantech — Eki-1361 Series FirmwareAdvantech — Eki-1362 Series Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-6476",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "ics-cert@hq.dhs.gov",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-11-07T03:59:00.127",
  "references": [
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-309-01",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "ics-cert@hq.dhs.gov"
    },
    {
      "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-309-01",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which makes it easier for remote attackers to obtain access via an SSH session."
    },
    {
      "lang": "es",
      "value": "Dispositivos Advantech EKI-122x-BE con firmware en versiones anteriores a 1.65, disposititvos EKI-132x con firmware en versiones anteriores a 1.98 y dispositivos EKI-136x con firmware en versiones anteriores a 1.27 tienen claves SSH embebidas, lo que hace más facil a atacantes remotos obtener acceso a través de una sesión SSH."
    }
  ],
  "lastModified": "2026-06-17T00:30:56.030",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:advantech:eki-1321_series_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1890F2BC-F142-416F-849C-2E373A06FCA3",
              "versionEndIncluding": "1.96"
            },
            {
              "criteria": "cpe:2.3:o:advantech:eki-1322_series_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BE9EAB7C-D317-4CDD-889B-AA421DF76694",
              "versionEndIncluding": "1.96"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:advantech:eki-1321:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6D7B68EA-F9AD-4CC6-BAFA-B5129EEFE856"
            },
            {
              "criteria": "cpe:2.3:h:advantech:eki-1322:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8A27AED1-8435-4E68-98B7-22E2ECE6174D"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:advantech:eki-1361_series_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6F301098-8128-4926-90D6-0190964891D8",
              "versionEndIncluding": "1.17"
            },
            {
              "criteria": "cpe:2.3:o:advantech:eki-1362_series_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35F5689B-F1D2-400D-8DD5-C9DD5AAE72F4",
              "versionEndIncluding": "1.17"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:advantech:eki-1361:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "925AC192-E081-450A-BFB4-73CF9728E22C"
            },
            {
              "criteria": "cpe:2.3:h:advantech:eki-1362:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "21ED3DFA-0A24-412F-ABDC-8C23893DAB37"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:advantech:eki-122x_series_firmware:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8217E10B-54CA-4664-A721-9CBA23A23F2B",
              "versionEndIncluding": "1.49"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:advantech:eki-1221:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "519A0B53-DACF-46FD-B52C-8691B931F6DA"
            },
            {
              "criteria": "cpe:2.3:h:advantech:eki-1221d:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2BCC7BB2-333E-4C90-A2DE-81C9017AFD3F"
            },
            {
              "criteria": "cpe:2.3:h:advantech:eki-1222:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "23B86996-68E7-4314-8F28-2B275AFD3576"
            },
            {
              "criteria": "cpe:2.3:h:advantech:eki-1222d:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "205149C4-040E-4F2C-A0B8-B39EE42CB70B"
            },
            {
              "criteria": "cpe:2.3:h:advantech:eki-1224:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3F74E576-4E04-48B0-8031-5F80E59EBFCE"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "evaluatorComment": "<a href=\"http://cwe.mitre.org/data/definitions/798.html\" target=\"_blank\">CWE-798: Use of Hard-coded Credentials</a>",
  "sourceIdentifier": "ics-cert@hq.dhs.gov"
}