← Voltar para CVEs

CVE-2015-7286

N/A

Descricao

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 rely on a polyalphabetic substitution cipher with hardcoded keys, which makes it easier for remote attackers to defeat a cryptographic protection mechanism by capturing IP or V.22bis PSTN protocol traffic.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado11/25/2015

Ultima modificacao4/12/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

csl_dualcom:gprscsl_dualcom:gprs_cs2300-r_firmware

Fraquezas (CWE)

CWE-310

Referencias

http://cybergibbons.com/?p=2844(cret@cert.org)

http://www.kb.cert.org/vuls/id/428280(cret@cert.org)

http://www.kb.cert.org/vuls/id/BLUU-A3NQAL(cret@cert.org)

http://cybergibbons.com/?p=2844(af854a3a-2127-422b-91ae-364da2661108)

http://www.kb.cert.org/vuls/id/428280(af854a3a-2127-422b-91ae-364da2661108)

http://www.kb.cert.org/vuls/id/BLUU-A3NQAL(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.