CVE

Id
87828  
CVE No.
CVE-2016-10307  
Status
Candidate  
Description
Trango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion 2.0, and StrataLink 3.0 devices have a built-in, hidden root account, with a default password for which the MD5 hash value is public (but the cleartext value is perhaps not yet public). This account is accessible via SSH and/or TELNET, and grants access to the underlying embedded UNIX OS on the device, allowing full control over it.  
Phase
Assigned (20170329)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
765134 87828 CVE-2016-10307 MISC:http://blog.iancaling.com/post/153011925478  View
765135 87828 CVE-2016-10307 BID:97242  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
761 JVNDB-2016-001534 Cisco Spark の REST インターフェースにおけるアクセス制限を回避される脆弱性 Cisco Spark の REST インターフェースには、アクセス制限を回避され、任意のユーザアカウントを作成される脆弱性が存在します。 CVE-2016-1322 87828 5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001534.html  View