Vulnerabilities > Cisco > UCS Invicta C3124Sa Appliance > Critical

DATE CVE VULNERABILITY TITLE RISK
2016-04-06 CVE-2016-1313 Permissions, Privileges, and Access Controls vulnerability in Cisco UCS Invicta C3124Sa Appliance 4.3.1/4.5.0/5.0.1
Cisco UCS Invicta C3124SA Appliance 4.3.1 through 5.0.1, UCS Invicta Scaling System and Appliance, and Whiptail Racerunner improperly store a default SSH private key, which allows remote attackers to obtain root access via unspecified vectors, aka Bug ID CSCun71294.
network
low complexity
cisco CWE-264
critical
 9.8
9.8