CVE-2015-7288

Опубликовано: 25 нояб. 2015

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 allow remote attackers to modify the configuration via a command in an SMS message, as demonstrated by a "4 2" command.

Ссылки

http://cybergibbons.com/?p=2844
Exploit
http://www.kb.cert.org/vuls/id/428280
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-A3NQAL
Third Party Advisory
US Government Resource
http://cybergibbons.com/?p=2844
Exploit
http://www.kb.cert.org/vuls/id/428280
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-A3NQAL
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:csl_dualcom:gprs_cs2300-r_firmware:1.25:*:*:*:*:*:*:*

cpe:2.3:o:csl_dualcom:gprs_cs2300-r_firmware:3.53:*:*:*:*:*:*:*

cpe:2.3:h:csl_dualcom:gprs:cs2300-r:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02864

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-254

Связанные уязвимости

GHSA-vqv3-c8pp-c255

github

больше 3 лет назад