CVE-2017-7576

Published: Apr 6, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials (such as the username of energetic and password of wireless) meant to allow the vendor to access the devices. These credentials can be used in the web interface or by connecting to the device via TELNET. This is fixed in recent versions including 1.4.8.

Affected (1)

Products: Dragonwavex: Horizon Wireless Radio Firmware

1 product

Horizon Wireless Radio Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dragonwavex Horizon Wireless Radio Firmware	Version 1.01.03

Running on/with	Platform Versions
Dragonwavex Horizon Wireless Radio	All versions

Related CWEs

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (2)

http://blog.iancaling.com/post/159276197313/

Source: cve@mitre.org

Third Party Advisory

http://blog.iancaling.com/post/159276197313/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.