CVE-2016-1561: Exagrid EX10000E Firmware

High severity, CVSS 7.5. EPSS: 74.3% chance of exploitation in the next 30 days.

ExaGrid appliances with firmware before 4.8 P26 have a default SSH public key in the authorized_keys file for root, which allows remote attackers to obtain SSH access by leveraging knowledge of a private key from another installation or a firmware image.

Affected products

• Exagrid EX10000E Firmware: version 4.8 only
• Exagrid EX13000E Firmware: version 4.8 only
• Exagrid EX21000E Firmware: version 4.8 only
• Exagrid EX3000 Firmware: version 4.8 only
• Exagrid EX32000E Firmware: version 4.8 only
• Exagrid EX40000E Firmware: version 4.8 only
• Exagrid EX5000 Firmware: version 4.8 only
• Exagrid EX7000 Firmware: version 4.8 only

Published 2017-04-21. Last modified 2026-06-17.