Command injection

Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the...

CVE-2017-7318

Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution RCE vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication...

CVE-2017-7318

Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution RCE vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication...

CVE-2017-7318

Siklu Etherhaul devices (8010TX/1200FX) with firmware 7.4.0–10.7.3 are affected by an RCE due to the rfpiped service listening on TCP port 555 using hardcoded AES keys, enabling unauthenticated command execution. This is described as a failed patch for CVE-2017-7318 and may affect other Etherhaul...

CVE-2016-10308

CVE-2016-10308 affects Siklu EtherHaul radios running versions prior to 3.7.1 and 6.x prior to 6.9.0. The vulnerability stems from a built-in, hidden root account with an unchangeable password shared across all devices. This account allows access to the embedded Linux OS via both SSH and the devi...

CVE-2016-10308

Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the...

PT-2017-17662

Name of the Vulnerable Software and Affected Versions: Siklu EtherHaul versions prior to 7.4.0 Description: The issue allows a remote attacker to execute commands and retrieve sensitive information, including usernames and plaintext passwords, from the device without requiring authentication...

Siklu EtherHaul < 7.4.0 Remote Command Execution Vulnerability

Exploit for hardware platform in category remote exploits + Credits: Ian Ling + Website: iancaling.com + Source: http://blog.iancaling.com/post/155127766533 Vendor: ================= https://www.siklu.com/ Product: ====================== -Siklu EtherHaul EH- Vulnerability Details:...