Security Advisory

CVE-2015-8362

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2016-01-22 11:00:00
Last updated 2024-08-06 08:13:32
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2015-10-12 has a hardcoded password for the BlackWidow account, which makes it easier for remote attackers to obtain access via a (1) SSH or (2) HTTP session, a different vulnerability than CVE-2016-1984.