CVE-2016-10308

2017-03-3007:00:00

mitre

www.cve.org

9.5 High

AI Score

Confidence

High

0.012 Low

EPSS

Percentile

85.6%

JSON

Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device’s web interface and grants access to the underlying embedded Linux OS on the device, allowing full control over it.

References

blog.iancaling.com/post/145309944453

www.securityfocus.com/bid/97243