CVE-2015-7285

The CVE-2015-7285 entry concerns CSL DualCom GPRS CS2300-R alarm signalling boards (firmware 1.25–3.53). The vulnerability is a lack of mutual authentication between CS2300-R SPTs and ARC polling servers, enabling MITM attackers to spoof HSxx responses and bypass access controls. Connected source...