RSS   Vulnerabilities for
'Syslink sl-1000 modular gateway firmware'
   RSS

2016-04-25
 
CVE-2016-2333

 

 
SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 use the same hardcoded encryption key across different customers' installations, which allows attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

 
 
CVE-2016-2332

 

 
flu.cgi in the web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 allows remote authenticated users to execute arbitrary commands via the 5066 (aka dnsmasq) parameter.

 
 
CVE-2016-2331

 

 
The web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 has a default password, which makes it easier for remote attackers to obtain access via unspecified vectors.

 


Copyright 2024, cxsecurity.com

 

Back to Top