Lucene search
HistoryNov 25, 2015 - 4:59 a.m.
CVE-2015-7285
cve-2015-7285
csl dualcom
gprs
firmware
authentication bypass
man-in-the-middle
arc
spoofing
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
45.1%
CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 do not require authentication from Alarm Receiving Center (ARC) servers, which allows man-in-the-middle attackers to bypass intended access restrictions via a spoofed HSxx response.
Affected configurations
Node
csl_dualcomgprs_cs2300-r_firmwareMatch1.25
ORcsl_dualcomgprs_cs2300-r_firmwareMatch3.53
csl_dualcomgprsMatchcs2300-r
Related
cvelist
cvelist
CVE-2015-7285
2015-11-25 02:00:00
nvd
nvd
CVE-2015-7285
2015-11-25 04:59:01
prion
prion
Authentication flaw
2015-11-25 04:59:00
cert
cert
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
45.1%
Related for CVE-2015-7285