{"uuid": "6a5bc805-050e-4922-a226-3ef7c3a50c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-125121", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ssh/array_vxag_vapv_privkey_privesc.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"xistence \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a default hardcoded private SSH key or default hardcoded\\n          login and password in the vAPV 8.3.2.17 and vxAG 9.2.0.34 appliances made\\n          by Array Networks. After logged in as the unprivileged user, it's possible to modify\\n          the world-writable file /ca/bin/monitor.sh with attacker-supplied arbitrary code.\\n          Execution is possible by using the backend tool, running setuid, to turn the debug\\n          monitoring on. This makes it possible to trigger a payload with root privileges.\", \"disclosure_date\": \"2014-02-03\", \"fullname\": \"exploit/unix/ssh/array_vxag_vapv_privkey_privesc\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Array Networks vAPV and vxAG Private Key Privilege Escalation Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/ssh/array_vxag_vapv_privkey_privesc.rb\", \"platform\": \"Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"unix/ssh/array_vxag_vapv_privkey_privesc\", \"references\": [\"CVE-2014-125121\", \"OSVDB-104652\", \"OSVDB-104653\", \"OSVDB-104654\", \"PACKETSTORM-125761\"], \"rport\": 22, \"session_types\": false, \"targets\": [\"vAPV 8.3.2.17 / vxAG 9.2.0.34\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:39.789193Z"}