CVEvulnerability
CVE-2016-2333
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-04-25
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 use the same hardcoded encryption key across different customers' installations, which allows attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.
Affected configurations
• systech syslink sl-1000 modular gateway firmware
Related
Weakness · not in database (1)
References
- http://www.kb.cert.org/vuls/id/822980 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/822980 Third Party Advisory, US Government Resource