PT-2015-7505 · Csl · Csl Dualcom Gprs Cs2300-R

Andrew Tierney · Publicado 2015-11-25 · Atualizado 2015-11-25 · CVE-2015-7287

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CSL DualCom GPRS CS2300-R devices versions 1.25 through 3.53

Description The issue allows remote attackers to execute commands on the device by leveraging knowledge of the default PIN and including it in an SMS message. The default PIN 001984 is used across different customers' installations.

Recommendations For versions 1.25 through 3.53, change the default PIN 001984 to a unique and secure PIN to prevent unauthorized access.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2015-7287

Produtos afetados

Csl Dualcom Gprs Cs2300-R

Referências · 4

• 🔥 http://cybergibbons.com/?p=2844 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-7287 · Nota de Segurança
• http://kb.cert.org/vuls/id/BLUU-A3NQAL · Nota
• http://kb.cert.org/vuls/id/428280 · Nota