Trango Altum AC600 Default Root Login

`[+] Credits: Ian Ling  
[+] Website: iancaling.com  
[+] Source: http://blog.iancaling.com/post/155395764003  
  
Vendor:  
=================  
https://www.trangosys.com/  
  
Product:  
======================  
-Altum AC600  
  
Vulnerability Details:  
=====================  
  
Trango Altum AC600a2s have a default root login (root:abcd1234) that is  
accessible via both SSH and telnet by default. Logging in as root on this  
device gives you access to a Linux shell, granting you full control over  
the device. These credentials are not mentioned in any manuals, or on  
Trango's website.  
  
Affected versions:  
ALL VERSIONS (as of 2016/01/06)  
  
Impact:  
The remote attacker has full control over the device, including shell  
access. This can lead to packet sniffing and tampering, denial of service,  
and even damage to the device.  
  
  
Disclosure Timeline:  
===================================  
Vendor Notification: December 23, 2016 (no response received)  
Public Disclosure: January 4th, 2017  
  
Exploitation Technique:  
=======================  
Remote  
  
Severity Level:  
================  
Critical  
  
  
`