{"uuid": "7b17119f-8425-41e4-bbd0-5e572debf053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-16137", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/cisco_7937g_ssh_privesc.py", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Cody Martin\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a feature that should not be available \\n\\tvia the web interface. An unauthenticated user may change \\n\\tthe credentials for SSH access to any username and password \\n\\tcombination desired, giving access to administrative \\n\\tfunctions through an SSH connection.\", \"disclosure_date\": \"2020-06-02\", \"fullname\": \"auxiliary/admin/http/cisco_7937g_ssh_privesc\", \"is_install_path\": true, \"mod_time\": \"2022-01-23 15:28:32 +0000\", \"name\": \"Cisco 7937G SSH Privilege Escalation\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/admin/http/cisco_7937g_ssh_privesc.py\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"admin/http/cisco_7937g_ssh_privesc\", \"references\": [\"URL-https://web.archive.org/web/20200921054955/https://www.blacklanternsecurity.com/2020-08-07-Cisco-Unified-IP-Conference-Station-7937G/\", \"CVE-2020-16137\"], \"rport\": null, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:44.091294Z"}