← Back to CVEs

CVE-2015-7286

N/A

Description

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 rely on a polyalphabetic substitution cipher with hardcoded keys, which makes it easier for remote attackers to defeat a cryptographic protection mechanism by capturing IP or V.22bis PSTN protocol traffic.

CVE Details

CVSS v3.1 ScoreN/A

Published11/25/2015

Last Modified4/12/2025

Sourcenvd

Honeypot Sightings0

Affected Products

csl_dualcom:gprscsl_dualcom:gprs_cs2300-r_firmware

Weaknesses (CWE)

CWE-310

References

http://cybergibbons.com/?p=2844(cret@cert.org)

http://www.kb.cert.org/vuls/id/428280(cret@cert.org)

http://www.kb.cert.org/vuls/id/BLUU-A3NQAL(cret@cert.org)

http://cybergibbons.com/?p=2844(af854a3a-2127-422b-91ae-364da2661108)

http://www.kb.cert.org/vuls/id/428280(af854a3a-2127-422b-91ae-364da2661108)

http://www.kb.cert.org/vuls/id/BLUU-A3NQAL(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.