CVE-2019-15017

The SSH service is enabled on the Zingbox Inspector versions 1.294 and earlier, exposing SSH to the local network

published October 9, 2019

CVSS
—
EPSS
0%
Percentile
28.1
In the wild
Unconfirmed
What it is

The SSH service is enabled on the Zingbox Inspector versions 1.294 and earlier, exposing SSH to the local network. When combined with PAN-SA-2019-0027, this can allow an attacker to authenticate to the service using hardcoded credentials.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00356 · 28.1th percentile
Published
2019-10-09T20:20Z
EPSS history
Timeline
  • 09 OCT 20:20Z
    The SSH service is enabled on the Zingbox Inspector versions 1.294 and earlier, exposing SSH to the local network
    cvelistv5