CVE-2015-7287
Last modified
CVE-2015-7287 is a vulnerability of currently unknown severity. CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations, which allows remote attackers to execute commands by leveraging knowledge of this PIN and including it in an SMS message.. EPSS estimates a 3.21% chance of exploitation in the next 30 days.
Description
CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations, which allows remote attackers to execute commands by leveraging knowledge of this PIN and including it in an SMS message.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Csl Dualcom | Gprs Cs2300-R Firmware | 1.25 |
| Csl Dualcom | Gprs Cs2300-R Firmware | 3.53 |
References
- http://www.kb.cert.org/vuls/id/428280Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/BLUU-A3NQALThird Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/428280Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/BLUU-A3NQALThird Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2015-7287?
How severe is CVE-2015-7287?
How do I fix CVE-2015-7287?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2015
- CVE-2015-7281Cross-site request forgery (CSRF) vulnerability on ReadyNet …
- CVE-2015-7282ReadyNet WRT300N-DD devices with firmware 1.0.26 use the sam…
- CVE-2015-7283The web administration interface on ZyXEL NBG-418N devices w…
- CVE-2015-7284Cross-site request forgery (CSRF) vulnerability on ZyXEL NBG…
- CVE-2015-7285CSL DualCom GPRS CS2300-R devices with firmware 1.25 through…
- CVE-2015-7286CSL DualCom GPRS CS2300-R devices with firmware 1.25 through…
- CVE-2015-7288CSL DualCom GPRS CS2300-R devices with firmware 1.25 through…
- CVE-2015-7289Arris DG860A, TG862A, and TG862G devices with firmware TS070…
- CVE-2015-7290Cross-site scripting (XSS) vulnerability in adv_pwd_cgi in t…
- CVE-2015-7291Cross-site request forgery (CSRF) vulnerability in adv_pwd_c…
- CVE-2015-7292Stack-based buffer overflow in the havok_write function in d…
- CVE-2015-7293Multiple cross-site request forgery (CSRF) vulnerabilities i…
Are you affected by CVE-2015-7287?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST