Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x43q-hqf9-9w3x

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the device, allowing full control over it.

Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the device, allowing full control over it.

EPSS

Процентиль: 84%
0.02104
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 9.8
nvd
почти 9 лет назад

Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the device, allowing full control over it.

CVSS3: 9.8
fstec
около 10 лет назад

Уязвимость микропрограммного обеспечения радиорелейной станции Siklu EtherHaul, связанная с использованием предустановленных учетных данных, позволяющая нарушителю получить доступ к встроенной операционной системе с правами администратора

EPSS

Процентиль: 84%
0.02104
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-798