CVE-2012-4577

The Linux firmware image on (1) Korenix Jetport 5600 series serial-device servers and (2) ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 85%
Common Weakness Enumeration
References
http://ics-cert.us-cert.gov/advisories/ICSA-12-263-02
http://ics-cert.us-cert.gov/advisories/ICSA-12-297-02
http://www.digitalbond.com/2012/06/13/korenix-and-oring-insecurity
http://www.securityfocus.com/bid/55196
https://exchange.xforce.ibmcloud.com/vulnerabilities/77992
http://ics-cert.us-cert.gov/advisories/ICSA-12-263-02
http://ics-cert.us-cert.gov/advisories/ICSA-12-297-02
http://www.digitalbond.com/2012/06/13/korenix-and-oring-insecurity
http://www.securityfocus.com/bid/55196
https://exchange.xforce.ibmcloud.com/vulnerabilities/77992