CVE-2015-7285

N/A

Description

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 do not require authentication from Alarm Receiving Center (ARC) servers, which allows man-in-the-middle attackers to bypass intended access restrictions via a spoofed HSxx response.

CVE Details

CVSS v3.1 ScoreN/A

Published11/25/2015

Last Modified4/12/2025

Sourcenvd

Honeypot Sightings0

Affected Products

csl_dualcom:gprscsl_dualcom:gprs_cs2300-r_firmware

Weaknesses (CWE)

CWE-287

References

http://cybergibbons.com/?p=2844(cret@cert.org)

http://www.kb.cert.org/vuls/id/428280(cret@cert.org)

http://www.kb.cert.org/vuls/id/BLUU-A3NQAL(cret@cert.org)

http://cybergibbons.com/?p=2844(af854a3a-2127-422b-91ae-364da2661108)

http://www.kb.cert.org/vuls/id/428280(af854a3a-2127-422b-91ae-364da2661108)

http://www.kb.cert.org/vuls/id/BLUU-A3NQAL(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.