Hardcoded credentials

SysLINK SL-1000 Machine-to-Machine M2M Modular Gateway devices with firmware before 01A.8 use the same hardcoded encryption key across different customers' installations, which allows attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another...

CVE-2016-2333

The CVE-2016-2333 issue affects the SysLINK SL-1000 M2M Modular Gateway family, with firmware prior to 01A.8, where a single hard-coded cryptographic key is reused across different installations. This flaw can allow an attacker with knowledge of the key to defeat cryptographic protections, potent...

CVE-2016-2331

The CVE-2016-2331 issue affects Systech SysLINK SL-1000 M2M Modular Gateway devices with firmware prior to 01A.8. Multiple sources describe a privilege-acquisition vulnerability in the web interface due to a hard-coded/default password, enabling a remote attacker to obtain root access. CERT/CC no...

CVE-2016-2332: Improper Neutralization of Special Elements used in a Command

flu.cgi in the web interface on SysLINK SL-1000 Machine-to-Machine M2M Modular Gateway devices with firmware before 01A.8 allows remote authenticated users to execute arbitrary commands via the 5066 aka dnsmasq parameter...

CVE-2016-2331: Undefined Security Weakness

The web interface on SysLINK SL-1000 Machine-to-Machine M2M Modular Gateway devices with firmware before 01A.8 has a default password, which makes it easier for remote attackers to obtain access via unspecified vectors...

CVE-2016-2333: Undefined Security Weakness

SysLINK SL-1000 Machine-to-Machine M2M Modular Gateway devices with firmware before 01A.8 use the same hardcoded encryption key across different customers' installations, which allows attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another...

PT-2016-5117

Name of the Vulnerable Software and Affected Versions SysLINK SL-1000 Machine-to-Machine M2M Modular Gateway devices with firmware prior to 01A.8 Description The issue allows remote authenticated users to execute arbitrary commands. This is achieved via the dnsmasq parameter, also known as 5066, ...

PT-2016-5118

Name of the Vulnerable Software and Affected Versions SysLINK SL-1000 Machine-to-Machine M2M Modular Gateway devices with firmware prior to 01A.8 Description The issue concerns the use of a hardcoded encryption key across different installations of the device, allowing attackers to bypass...

PT-2016-1845

Name of the Vulnerable Software and Affected Versions SysLINK SL-1000 Machine-to-Machine M2M Modular Gateway devices with firmware prior to 01A.8 Description The issue is related to the web interface of the SysLINK M2M Modular Gateway, which has a default password. This makes it easier for remote...