360 Systems Maxx, Image Server Maxx, and Image Server 2000 have a hardcoded password for the root account, which makes it easier for remote attackers to execute arbitrary code, or modify video content or scheduling, via an SSH session.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Image_server_2000 | 360systems | - (including) | - (including) |
| Image_server_maxx | 360systems | - (including) | - (including) |
| Maxx | 360systems | - (including) | - (including) |