CVE-2015-6476

Published: Nov 7, 2015Modified: May 6, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which makes it easier for remote attackers to obtain access via an SSH session.

Affected (5)

Products: Advantech: Eki 1321 Series Firmware, Eki 1322 Series Firmware, Eki 1361 Series Firmware, Eki 1362 Series Firmware, Eki 122x Series Firmware

Advantech

5 products

Eki 1321 Series Firmware

Eki 1322 Series Firmware

Eki 1361 Series Firmware

Eki 1362 Series Firmware

Eki 122x Series Firmware

Configuration A

2 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Advantech Eki 1321 Series Firmware	Up to 1.96
Advantech Eki 1322 Series Firmware	Up to 1.96

Running on/with	Platform Versions
Advantech Eki 1321	All versions
Advantech Eki 1322	All versions

Configuration B

2 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Advantech Eki 1361 Series Firmware	Up to 1.17
Advantech Eki 1362 Series Firmware	Up to 1.17

Running on/with	Platform Versions
Advantech Eki 1361	All versions
Advantech Eki 1362	All versions

Configuration C

1 vulnerable · 5 platform

Vulnerable Software	Affected Versions
Advantech Eki 122x Series Firmware	Up to 1.49

Running on/with	Platform Versions
Advantech Eki 1221	All versions
Advantech Eki 1221d	All versions
Advantech Eki 1222	All versions
Advantech Eki 1222d	All versions
Advantech Eki 1224	All versions

References (2)

https://ics-cert.us-cert.gov/advisories/ICSA-15-309-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://ics-cert.us-cert.gov/advisories/ICSA-15-309-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.