← Back

CVE-2015-7287

nvd nist
Published: Nov 25, 2015Modified: May 6, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations, which allows remote attackers to execute commands by leveraging knowledge of this PIN and including it in an SMS message.

Affected (2)

Csl Dualcom
1 product
Gprs Cs2300 R Firmware
Configuration A
2 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Csl Dualcom
Gprs Cs2300 R Firmware
Version 1.25
Gprs Cs2300 R Firmware
Version 3.53
Running on/withPlatform Versions
Csl Dualcom
Gprs
Version cs2300-r

Related CWEs

CWE-255
CWE-255

References (6)

Source: cret@cert.org
Exploit
Source: cret@cert.org
Third Party AdvisoryUS Government Resource
Source: cret@cert.org
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource

Timeline

No history available yet.