PT-2016-3210 · Trango · Trango Apex+10

Published 2016-10-07 · Updated 2021-05-05 · CVE-2016-10305

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trango Apex versions 2.1.1 and earlier ApexLynx version 2.0 and earlier ApexOrion version 2.0 and earlier ApexPlus versions 3.2.0 and earlier Giga versions 2.6.1 and earlier GigaLynx version 2.0 and earlier GigaOrion version 2.0 and earlier GigaPlus versions 3.2.3 and earlier GigaPro versions 1.4.1 and earlier StrataLink version 3.0 and earlier StrataPro version not specified

Description The issue concerns a built-in, hidden root account with a default password that was stored in cleartext within a software update package on a Trango FTP server. This account is accessible via SSH and/or TELNET, granting access to the underlying embedded UNIX OS on the device and allowing full control over it. The vulnerability can be exploited by a remote attacker to gain administrator access to the embedded operating system using SSH or Telnet connection.

Recommendations For Trango Apex versions 2.1.1 and earlier, consider disabling the root account access via SSH and/or TELNET until a patch is available. For ApexLynx version 2.0 and earlier, restrict access to the embedded UNIX OS to minimize the risk of exploitation. For ApexOrion version 2.0 and earlier, avoid using the default password for the root account in the affected devices. For ApexPlus versions 3.2.0 and earlier, consider changing the default password for the root account as a temporary workaround. For Giga versions 2.6.1 and earlier, disable the root account access via SSH and/or TELNET to prevent exploitation. For GigaLynx version 2.0 and earlier, restrict access to the embedded operating system. For GigaOrion version 2.0 and earlier, avoid using the default password for the root account. For GigaPlus versions 3.2.3 and earlier, consider changing the default password for the root account. For GigaPro versions 1.4.1 and earlier, disable the root account access via SSH and/or TELNET. For StrataLink version 3.0 and earlier, restrict access to the embedded UNIX OS. For StrataPro, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2017-02503

CVE-2016-10305

Affected Products

Apexlynx

Apexorion

Apexplus

Giga

Gigalynx

Gigaorion

Gigaplus

Gigapro

Stratalink

Stratapro

Trango Apex

References · 4

• 🔥 http://blog.iancaling.com/post/153011925478 · Exploit
• https://osv.dev/vulnerability/CVE-2016-10305 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-10305 · Security Note
• https://bdu.fstec.ru/vul/2017-02503 · Security Note