CVE-2015-7286

Опубликовано: 25 нояб. 2015

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 rely on a polyalphabetic substitution cipher with hardcoded keys, which makes it easier for remote attackers to defeat a cryptographic protection mechanism by capturing IP or V.22bis PSTN protocol traffic.

Ссылки

http://cybergibbons.com/?p=2844
Exploit
http://www.kb.cert.org/vuls/id/428280
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-A3NQAL
Third Party Advisory
US Government Resource
http://cybergibbons.com/?p=2844
Exploit
http://www.kb.cert.org/vuls/id/428280
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-A3NQAL
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:csl_dualcom:gprs_cs2300-r_firmware:1.25:*:*:*:*:*:*:*

cpe:2.3:o:csl_dualcom:gprs_cs2300-r_firmware:3.53:*:*:*:*:*:*:*

cpe:2.3:h:csl_dualcom:gprs:cs2300-r:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03246

Низкий

6.4 Medium

CVSS2

Дефекты

CWE-310

Связанные уязвимости

GHSA-fggh-wvvr-32q2

github

больше 3 лет назад