CVE-2012-4577: Critical severity korenix jetport vulnerability
The Linux firmware image on (1) Korenix Jetport 5600 series serial-device servers and (2) ORing Industrial DIN-Rail serial-device servers has a hardcoded password of "password" for the root account, which allows remote attackers to obtain administrative access via an SSH session.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4577?
CVE-2012-4577 has a high severity due to the presence of a hardcoded password that allows unauthorized remote access.
How do I fix CVE-2012-4577?
To fix CVE-2012-4577, change the hardcoded root password from 'password' to a strong, unique password on affected devices.
What devices are affected by CVE-2012-4577?
CVE-2012-4577 affects the Korenix Jetport 5600 series and ORing Industrial DIN-Rail serial-device servers.
Can CVE-2012-4577 be exploited remotely?
Yes, CVE-2012-4577 can be exploited remotely via an SSH session due to the hardcoded root password.
Is there a patch available for CVE-2012-4577?
There is no specific patch for CVE-2012-4577, but changing the hardcoded password is the recommended mitigation.