NVD

Id
27945  
Name
CVE-2015-7287  
Description
CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers" installations, which allows remote attackers to execute commands by leveraging knowledge of this PIN and including it in an SMS message.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-11-24  
Modified Date
2015-11-25  
Seq
2015-7287  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
147002 27945 CVE-2015-7287 http://cybergibbons.com/?p=2844  View
147003 27945 CVE-2015-7287 VU#428280  View
147004 27945 CVE-2015-7287 http://www.kb.cert.org/vuls/id/BLUU-A3NQAL  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10711 JVNDB-2015-006031 CSL DualCom GPRS CS2300-R デバイスのファームウェアにおける任意のコマンドを実行される脆弱性 CSL DualCom GPRS CS2300-R デバイスのファームウェアは、異なるカスタマのインストールに同一の 001984 デフォルト PIN を使用するため、任意のコマンドを実行される脆弱性が存在します。 CVE-2015-7287 84512 CVE-2015-7287 27945 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006031.html 2015-11-23 2015-11-26 View