CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations, which allows remote attackers to execute commands by leveraging knowledge of this PIN and including it in an SMS message.
References
Link | Resource |
---|---|
http://cybergibbons.com/?p=2844 | Exploit |
http://www.kb.cert.org/vuls/id/428280 | Third Party Advisory US Government Resource |
http://www.kb.cert.org/vuls/id/BLUU-A3NQAL | Third Party Advisory US Government Resource |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: certcc
Published: 2015-11-25T02:00:00
Updated: 2015-11-25T04:57:04
Reserved: 2015-09-18T00:00:00
Link: CVE-2015-7287
JSON object: View
NVD Information
Status : Analyzed
Published: 2015-11-25T04:59:04.983
Modified: 2015-11-25T18:29:22.697
Link: CVE-2015-7287
JSON object: View
Redhat Information
No data.
CWE