PT-2016-1845 · Syslink · Syslink Sl-1000

Jeremy Allen + 1 · Published 2016-04-25 · Updated 2016-05-31 · CVE-2016-2331

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware prior to 01A.8

Description The issue is related to the web interface of the SysLINK M2M Modular Gateway, which has a default password. This makes it easier for remote attackers to obtain access to the device. The vulnerability can be exploited by attackers to gain unauthorized access.

Recommendations For firmware versions prior to 01A.8, update the firmware to version 01A.8 or later to resolve the issue. As a temporary workaround, consider changing the default password to a strong and unique password until a firmware update is available.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

BDU:2016-01178

CVE-2016-2331

Affected Products

Syslink Sl-1000

References · 3

• https://bdu.fstec.ru/vul/2016-01178 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-2331 · Security Note
• http://kb.cert.org/vuls/id/822980 · Note