CVE-2016-1560: Exagrid EX10000E Firmware

Critical severity, CVSS 9.8. EPSS: 72.3% chance of exploitation in the next 30 days.

ExaGrid appliances with firmware before 4.8 P26 have a default password of (1) inflection for the root shell account and (2) support for the support account in the web interface, which allows remote attackers to obtain administrative access via an SSH or HTTP session.

Affected products

• Exagrid EX10000E Firmware: version 4.8 only
• Exagrid EX13000E Firmware: version 4.8 only
• Exagrid EX21000E Firmware: version 4.8 only
• Exagrid EX3000 Firmware: version 4.8 only
• Exagrid EX32000E Firmware: version 4.8 only
• Exagrid EX40000E Firmware: version 4.8 only
• Exagrid EX5000 Firmware: version 4.8 only
• Exagrid EX7000 Firmware: version 4.8 only

Published 2017-04-21. Last modified 2026-06-17.