CVE-2018-16158
First published: Thu Aug 30 2018(Updated: )
Eaton Power Xpert Meter 4000, 6000, and 8000 devices before 13.4.0.10 have a single SSH private key across different customers' installations and do not properly restrict access to this key, which makes it easier for remote attackers to perform SSH logins (to uid 0) via the PubkeyAuthentication option.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Eaton Power Xpert Meter 4000 Firmware | <13.4.0.10 | |
| Eaton Power Xpert Meter 4000 | ||
| Eaton Power Xpert Meter 6000 Firmware | <13.4.0.10 | |
| Eaton Power Xpert Meter 6000 | ||
| Eaton Power Xpert Meter 8000 Firmware | <13.4.0.10 | |
| Eaton Power Xpert Meter 8000 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-16158?
CVE-2018-16158 has a severity of critical.
How does CVE-2018-16158 impact Eaton Power Xpert Meter devices?
CVE-2018-16158 allows remote attackers to perform SSH logins with root access to Eaton Power Xpert Meter 4000, 6000, and 8000 devices before version 13.4.0.10.
What is the affected software for CVE-2018-16158?
The affected software for CVE-2018-16158 includes Eaton Power Xpert Meter 4000, 6000, and 8000 devices before version 13.4.0.10.
How can I fix CVE-2018-16158?
To fix CVE-2018-16158, upgrade Eaton Power Xpert Meter firmware to version 13.4.0.10 or higher.
Where can I find more information about CVE-2018-16158?
More information about CVE-2018-16158 can be found on the Eaton website and in the provided references.
- collector/nvd-index
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/severity
- agent/weakness
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/event
- agent/author
- agent/tags
- agent/type
- vendor/eaton
- canonical/eaton power xpert meter 4000 firmware
- canonical/eaton power xpert meter 4000
- canonical/eaton power xpert meter 6000 firmware
- canonical/eaton power xpert meter 6000
- canonical/eaton power xpert meter 8000 firmware
- canonical/eaton power xpert meter 8000