CVE:CVE-2016-1560
CNNVD:CNNVD-201604-168
ExaGrid是美国ExaGrid公司的一款基于Linux平台的提供重复数据删除功能的备份与恢复存储设备。
使用4.8 P26之前的版本固件的ExaGrid设备存在安全漏洞。远程攻击者可借助SSH或HTTP会话利用该漏洞获取管理员访问权限。
solution:Upgrade exagrid ex3000_firmware to a higher version than 4.8,and avoid the version 4.8; Upgrade exagrid ex5000_firmware to a higher version than 4.8,and avoid the version 4.8; Upgrade exagrid ex7000_firmware to a higher version than 4.8,and avoid the version 4.8; Upgrade exagrid ex10000e_firmware to a higher version than 4.8,and avoid the version 4.8; Upgrade exagrid ex13000e_firmware to a higher version than 4.8,and avoid the version 4.8; Upgrade exagrid ex21000e_firmware to a higher version than 4.8,and avoid the version 4.8; Upgrade exagrid ex32000e_firmware to a higher version than 4.8,and avoid the version 4.8; Upgrade exagrid ex40000e_firmware to a higher version than 4.8,and avoid the version 4.8