CVEvulnerability
CVE-2015-7287
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-11-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-255
Description
CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations, which allows remote attackers to execute commands by leveraging knowledge of this PIN and including it in an SMS message.
Affected configurations
• csl dualcom gprs cs2300-r firmware 1.25
• csl dualcom gprs cs2300-r firmware 3.53
Related
Weakness · not in database (1)
References
- http://cybergibbons.com/?p=2844 Exploit
- http://www.kb.cert.org/vuls/id/428280 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/BLUU-A3NQAL Third Party Advisory, US Government Resource
- http://cybergibbons.com/?p=2844 Exploit
- http://www.kb.cert.org/vuls/id/428280 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/BLUU-A3NQAL Third Party Advisory, US Government Resource