PT-2016-1845 · Syslink · Syslink Sl-1000

Jeremy Allen + 1 · Publicado 2016-04-25 · Atualizado 2016-05-31 · CVE-2016-2331

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware prior to 01A.8

Description The issue is related to the web interface of the SysLINK M2M Modular Gateway, which has a default password. This makes it easier for remote attackers to obtain access to the device. The vulnerability can be exploited by attackers to gain unauthorized access.

Recommendations For firmware versions prior to 01A.8, update the firmware to version 01A.8 or later to resolve the issue. As a temporary workaround, consider changing the default password to a strong and unique password until a firmware update is available.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

BDU:2016-01178

CVE-2016-2331

Produtos afetados

Syslink Sl-1000

Referências · 3

• https://bdu.fstec.ru/vul/2016-01178 · Nota de Segurança
• http://kb.cert.org/vuls/id/822980 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-2331 · Nota de Segurança