CVE-2016-7456

VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access via an SSH session.

CVSS v3.0 NVD

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

32.79% chance of exploitation in the next 30 days, 98th percentile

Published

2016-12-29

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/vmware_vdp_known_privk…

Security advisories

• http://www.vmware.com/security/advisories/VMSA-2016-0024.html
• http://www.securityfocus.com/bid/94990
• http://www.securitytracker.com/id/1037502

References

• CVE Record
• NVD entry