Lucene search
CertccCVE-2015-7288HistoryNov 25, 2015 - 4:59 a.m.
CVE-2015-7288
2015-11-2504:59:06
CWE-254
certcc
web.nvd.nist.gov
25
cve-2015-7288
csl dualcom
gprs
cs2300-r
firmware
remote attack
sms
config modification
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
7.1
Confidence
Low
EPSS
0.004
Percentile
73.9%
CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 allow remote attackers to modify the configuration via a command in an SMS message, as demonstrated by a “4 2” command.
Affected configurations
Node
csl_dualcomgprs_cs2300-r_firmwareMatch1.25
ORcsl_dualcomgprs_cs2300-r_firmwareMatch3.53
csl_dualcomgprsMatchcs2300-r
| Vendor | Product | Version | CPE |
|---|---|---|---|
| csl_dualcom | gprs_cs2300-r_firmware | 1.25 | cpe:2.3:o:csl_dualcom:gprs_cs2300-r_firmware:1.25:*:*:*:*:*:*:* |
| csl_dualcom | gprs_cs2300-r_firmware | 3.53 | cpe:2.3:o:csl_dualcom:gprs_cs2300-r_firmware:3.53:*:*:*:*:*:*:* |
| csl_dualcom | gprs | cs2300-r | cpe:2.3:h:csl_dualcom:gprs:cs2300-r:*:*:*:*:*:*:* |
Related
prion
prion
Command injection
2015-11-25 04:59:00
cvelist
cvelist
CVE-2015-7288
2015-11-25 02:00:00
nvd
nvd
CVE-2015-7288
2015-11-25 04:59:06
cert
cert
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
7.1
Confidence
Low
EPSS
0.004
Percentile
73.9%
Related for CVE-2015-7288