CVE-2022-47037

Siklu TG Terragraph devices before 2.1.1 allow attackers to discover valid, randomly generated credentials via GetCredentials...

CVE-2022-47036

Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on an MD5 hash. It can be used for "debug login" by an admin. NOTE: the vulnerability is not fixed by the 2.1.1 firmware; instead, it is fixed in newer hardware,...

CVE-2022-47037

Siklu TG Terragraph devices before 2.1.1 allow attackers to discover valid, randomly generated credentials via GetCredentials...

CVE-2022-47037

Siklu TG Terragraph devices prior to version 2.1.1 expose a credential-retrieval flaw in the GetCredentials endpoint. An attacker can discover valid, randomly generated credentials, enabling potential unauthorized access to the device. The cited remediation is to upgrade to 2.1.1 or later; as a t...

CVE-2022-47036

Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on an MD5 hash. It can be used for "debug login" by an admin. NOTE: the vulnerability is not fixed by the 2.1.1 firmware; instead, it is fixed in newer hardware,...

CVE-2022-47036

CVE-2022-47036 affects Siklu TG Terragraph devices before ~2.1.1. A hardcoded root password was revealed via a brute-force attack on an MD5 hash and can be used for a (admin) debug login. The vulnerability is not fixed by firmware 2.1.1; remediation is to move to newer hardware (which would typic...

PT-2024-11746 · Siklu · Siklu Tg Terragraph

Name of the Vulnerable Software and Affected Versions: Siklu TG Terragraph devices versions prior to 2.1.1 Description: The issue is related to a hardcoded root password in Siklu TG Terragraph devices, which was revealed through a brute force attack on an MD5 hash. This password can be used for...

Siklu MultiHaul TG Series 安全漏洞

The Siklu MultiHaul TG Series is a series of wireless transmission devices from Siklu designed to provide reliable, high-speed data transmission solutions, especially for fixed wireless access and connectivity needs in dense urban environments. A security vulnerability exists in the Siklu MultiHa...

Siklu MultiHaul TG Series 安全漏洞

The Siklu MultiHaul TG Series is a series of wireless transmission devices from Siklu designed to provide a reliable high-speed data transmission solution, especially for fixed wireless access and connectivity needs in dense urban environments. A security vulnerability exists in the Siklu MultiHa...

The vulnerability of the microprogramming software of the Siklu EtherHaul radio relay station, related to the use of pre-installed account data, allows a intruder to gain access to the embedded operating system with administrator privileges.

The vulnerability of the microprogramming software of the Siklu EtherHaul radio relay station is related to the use of a pre-installed root account. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to the embedded operating system with administrator...

WirelessGear Siklu EtherHaul Remote Code Execution Vulnerability (CNVD-2017-04887)

WirelessGear Siklu EtherHaul radios are a set of radios for commercial service from WirelessGear USA. A remote command execution vulnerability exists in WirelessGear Siklu EtherHaul versions prior to 7.4.0. A remote attacker could exploit this vulnerability to unauthorizedly execute commands to...

WirelessGear Siklu EtherHaul radios insecure default password vulnerability

WirelessGear Siklu EtherHaul radios are a set of radios for commercial service from WirelessGear USA. A security vulnerability exists in WirelessGear Siklu EtherHaul radios versions prior to 3.7.1 and 6.x versions prior to 6.9.0, which stems from an immutable password used by all devices. An...

CVE-2017-7318

Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution RCE vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication...

CVE-2016-10308

Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the...

CVE-2017-7318

Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution RCE vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication...

Command injection

Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the...

Design/Logic Flaw

Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution RCE vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication...

CVE-2017-7318

Siklu Etherhaul devices (8010TX/1200FX) with firmware 7.4.0–10.7.3 are affected by an RCE due to the rfpiped service listening on TCP port 555 using hardcoded AES keys, enabling unauthenticated command execution. This is described as a failed patch for CVE-2017-7318 and may affect other Etherhaul...

CVE-2016-10308

Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the...

CVE-2017-7318

Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution RCE vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication...