CVE Feed

    Dashboard / CVE / CVE-2015-6476

    CVE-2015-6476

    Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which makes it easier for remote attackers to obtain access via an SSH session.

    Published:Nov 7, 2015
    Last Modified:Apr 12, 2025
    EPS:Nov 7, 2015
    EPSS Score:0.00283
    CVSS Score:10

    Affected Products

    Vendor
    Advantech
    Product
    Eki-1221
    Vendor
    Advantech
    Product
    Eki-1221d
    Vendor
    Advantech
    Product
    Eki-1222
    Vendor
    Advantech
    Product
    Eki-1222d
    Vendor
    Advantech
    Product
    Eki-1224
    Vendor
    Advantech
    Product
    Eki-122x Series Firmware
    Vendor
    Advantech
    Product
    Eki-1321
    Vendor
    Advantech
    Product
    Eki-1321 Series Firmware
    Vendor
    Advantech
    Product
    Eki-1322
    Vendor
    Advantech
    Product
    Eki-1322 Series Firmware
    Vendor
    Advantech
    Product
    Eki-1361
    Vendor
    Advantech
    Product
    Eki-1361 Series Firmware
    Vendor
    Advantech
    Product
    Eki-1362
    Vendor
    Advantech
    Product
    Eki-1362 Series Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High