CVE-2015-7286

CVE-2015-7286 affects CSL DualCom GPRS CS2300-R alarm signalling boards (firmware 1.25–3.53). The root cause is a proprietary, polyalphabetic substitution cipher with hardcoded keys, enabling a remote attacker to decrypt or manipulate communications between SPTs and ARC servers. The vulnerability...