CVE-2015-6476

highPriorität · verfolgen · 41OT-Risiko · erhöhtEPSS 0.023 · 84. PerzentilEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

2.34% (84th) EPSS

CVSS 10 · high

Is it mine?

17 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · fstec_bdu · cisa_csaf_ot

EPSS · bewertet 2026-10-27

Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x devices with firmware before 1.27 have hardcoded SSH keys, which makes it easier for remote attackers to obtain access via an SSH session.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

MitigationEKI-122*-BE product line firmwarecisa_csaf_ot
Update EKI-122* product line to the latest version. (http://support.advantech.com.tw/Support/SearchResult.aspx?keyword=EKI-122*&searchtabs=Firmware)
http://support.advantech.com.tw/Support/SearchResult.aspx?keyword=EKI-122*&searchtabs=Firmware
MitigationEKI-132* product line firmwarecisa_csaf_ot
Update EKI-122* product line to the latest version. (http://support.advantech.com.tw/Support/SearchResult.aspx?keyword=EKI-122*&searchtabs=Firmware)
http://support.advantech.com.tw/Support/SearchResult.aspx?keyword=EKI-122*&searchtabs=Firmware
MitigationEKI-136* product line firmwarecisa_csaf_ot
Update EKI-122* product line to the latest version. (http://support.advantech.com.tw/Support/SearchResult.aspx?keyword=EKI-122*&searchtabs=Firmware)
http://support.advantech.com.tw/Support/SearchResult.aspx?keyword=EKI-122*&searchtabs=Firmware

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

10.0

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–critical · 6.5–10

v2.010highAV:N/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 10

v2.010criticalAV:N/AC:L/Au:N/C:C/I:C/A:Csecondary · FSTEC (BDU) RU

v2.08.5highAV:N/AC:L/Au:N/C:C/I:C/A:C/E:Usecondary · CVSS-BT (t0sche)

v3.06.5mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Nsecondary · CISA US

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-798USCWE-798US

betroffene Produkte (17)

Betroffene Produkte und Versionsbereiche.

Advantech EKI-122*-BE product line firmware: <1.65alle Versionencisa_csaf_otUS
Advantech EKI-132* product line firmware: <1.98alle Versionencisa_csaf_otUS
Advantech EKI-136* product line firmware: <1.27alle Versionencisa_csaf_otUS
Advantech EKI-122*-BE product line firmware< 1.65cisa_csaf_otUS
Advantech EKI-132* product line firmware< 1.98cisa_csaf_otUS
Advantech EKI-136* product line firmware< 1.27cisa_csaf_otUS
n/a n/a≤ n/aenisa_euvdEU
Advantech Co., Ltd EKI серии 122X≤ 1.65fstec_bduRU
Advantech Co., Ltd EKI серии 1321≤ 1.98fstec_bduRU
Advantech Co., Ltd EKI серии 1322≤ 1.98fstec_bduRU
Advantech Co., Ltd EKI серии 1361≤ 1.27fstec_bduRU
Advantech Co., Ltd EKI серии 1362≤ 1.27fstec_bduRU
advantech eki-122x series firmware≤ 1.49nvdUScpe:2.3:o:advantech:eki-122x_series_firmware:*:*:*:*:*:*:*:*
advantech eki-1321 series firmware≤ 1.96nvdUScpe:2.3:o:advantech:eki-1321_series_firmware:*:*:*:*:*:*:*:*
advantech eki-1322 series firmware≤ 1.96nvdUScpe:2.3:o:advantech:eki-1322_series_firmware:*:*:*:*:*:*:*:*
advantech eki-1361 series firmware≤ 1.17nvdUScpe:2.3:o:advantech:eki-1361_series_firmware:*:*:*:*:*:*:*:*
advantech eki-1362 series firmware≤ 1.17nvdUScpe:2.3:o:advantech:eki-1362_series_firmware:*:*:*:*:*:*:*:*

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

ICSA-15-309-01Advantech EKI Hard-coded SSH Keys Vulnerability2015-08-08icsa · cisa_csaf_otUS
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu cisa_csaf_ot nvd NVD CVE.org MITRE

veröffentlicht 2015-11-07geändert 2026-06-17

Referenzen (4)

Externe Belege — Patches, Meldungen, Analysen.

http://www.advantech.com/Patchcnnvd
https://ics-cert.us-cert.gov/advisories/ICSA-15-309-01 cnnvd
https://ics-cert.us-cert.gov/advisories/ICSA-15-309-01 enisa_euvd
https://ics-cert.us-cert.gov/advisories/ICSA-15-309-01Third Party AdvisoryUS Government Resourcenvd

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan