PT-2015-7505 · Csl · Csl Dualcom Gprs Cs2300-R

Andrew Tierney · Published 2015-11-25 · Updated 2015-11-25 · CVE-2015-7287

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CSL DualCom GPRS CS2300-R devices versions 1.25 through 3.53

Description The issue allows remote attackers to execute commands on the device by leveraging knowledge of the default PIN and including it in an SMS message. The default PIN 001984 is used across different customers' installations.

Recommendations For versions 1.25 through 3.53, change the default PIN 001984 to a unique and secure PIN to prevent unauthorized access.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2015-7287

Affected Products

Csl Dualcom Gprs Cs2300-R

References · 4

• 🔥 http://cybergibbons.com/?p=2844 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-7287 · Security Note
• http://kb.cert.org/vuls/id/BLUU-A3NQAL · Note
• http://kb.cert.org/vuls/id/428280 · Note