VDB
CVE-2015-7287
CVE-2015-7287
PUBLISHED
CVSS 7.5 HIGH
CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations, which allows remote attackers to execute commands by leveraging knowledge of this PIN and including it in an SMS message.
EPSS 5.69% · 90.6th percentile
Risk Scores
CVSS 2.0
7.5
EPSS Score
5.69%
90.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| csl_dualcom | gprs_cs2300-r_firmware | 1.25, 3.53 |
| n/a | n/a | n/a |
Timeline
- Nov 23, 2015 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Sep 3, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 8, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 16, 2023 EPSS Score
- Aug 14, 2023 EPSS Score
- Sep 7, 2023 EPSS Score
References
- VU#428280 third-party-advisory
- http://cybergibbons.com/?p=2844 url
- http://www.kb.cert.org/vuls/id/BLUU-A3NQAL url
- https://nvd.nist.gov/vuln/detail/CVE-2015-7287 advisory