Test Kennung:	1.3.6.1.4.1.25623.1.0.804414
Kategorie:	Gain a shell remotely
Titel:	Quantum DXi Remote 'root' Authentication Bypass Vulnerability
Zusammenfassung:	This host is running Quantum DXi and is prone to; authentication bypass vulnerability.
Beschreibung:	Summary: This host is running Quantum DXi and is prone to authentication bypass vulnerability. Vulnerability Insight: - The root user has a hardcoded password that is unknown and not changeable. Normally access is only through the restricted shells. - The /root/.ssh/authorized_keys on the appliance contains the static private ssh key. Using this key on a remote system to login through SSH will give a root shell. Vulnerability Impact: Successful exploitation will allow attacker to gain unauthorized root access to affected devices and completely compromise the devices. Affected Software/OS: Quantum DXi V1000 2.2.1 and below. Solution: Upgrade to Quantum DXi V1000 2.3.0.1 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N
Copyright	Copyright (C) 2014 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.