csl dualcom gprs cs2300-r firmware 1.25 vulnerabilities and exploits

(subscribe to this query)

5.8

CVSSv2

CSL DualCom GPRS CS2300-R devices with firmware 1.25 up to and including 3.53 do not require authentication from Alarm Receiving Center (ARC) servers, which allows man-in-the-middle malicious users to bypass intended access restrictions via a spoofed HSxx response.

Csl Dualcom Gprs Cs2300-r Firmware 1.25 Csl Dualcom Gprs Cs2300-r Firmware 3.53

1 Article

6.4

CVSSv2

CSL DualCom GPRS CS2300-R devices with firmware 1.25 up to and including 3.53 rely on a polyalphabetic substitution cipher with hardcoded keys, which makes it easier for remote malicious users to defeat a cryptographic protection mechanism by capturing IP or V.22bis PSTN protocol...

Csl Dualcom Gprs Cs2300-r Firmware 1.25 Csl Dualcom Gprs Cs2300-r Firmware 3.53

1 Article

7.5

CVSSv2

CSL DualCom GPRS CS2300-R devices with firmware 1.25 up to and including 3.53 use the same 001984 default PIN across different customers' installations, which allows remote malicious users to execute commands by leveraging knowledge of this PIN and including it in an SMS mes...

Csl Dualcom Gprs Cs2300-r Firmware 1.25 Csl Dualcom Gprs Cs2300-r Firmware 3.53

1 Article

4.3

CVSSv2

CSL DualCom GPRS CS2300-R devices with firmware 1.25 up to and including 3.53 allow remote malicious users to modify the configuration via a command in an SMS message, as demonstrated by a "4 2" command.

Csl Dualcom Gprs Cs2300-r Firmware 3.53 Csl Dualcom Gprs Cs2300-r Firmware 1.25

1 Article

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook