Vulnerability Details CVE-2016-2362
Fonality (previously trixbox Pro) 12.6 through 14.1i before 2016-06-01 has a hardcoded password for the FTP account, which allows remote attackers to obtain access via a (1) FTP or (2) SSH connection.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
Products affected by CVE-2016-2362
-
cpe:2.3:a:fonality:fonality:12.6
-
cpe:2.3:a:fonality:fonality:12.8
-
cpe:2.3:a:fonality:fonality:14.1i