CVE-2012-4702

Published: Mar 11, 2013Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

360 Systems Maxx, Image Server Maxx, and Image Server 2000 have a hardcoded password for the root account, which makes it easier for remote attackers to execute arbitrary code, or modify video content or scheduling, via an SSH session.

Affected (3)

Products: 360systems: Image Server 2000, Image Server Maxx, Maxx

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
360systems Image Server 2000	All versions
360systems Image Server Maxx	All versions
360systems Maxx	All versions

Related CWEs

CWE-255

References (2)

http://ics-cert.us-cert.gov/pdf/ICSA-13-038-01A.pdf

Source: ics-cert@hq.dhs.gov

US Government Resource

http://ics-cert.us-cert.gov/pdf/ICSA-13-038-01A.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

Timeline

No history available yet.