Trango Altum AC600 Default Root Login

2017.01.10
Credit: Ian Ling
Risk: High
Local: No
Remote: Yes
CVE: N/A
CWE: N/A

[+] Credits: Ian Ling [+] Website: iancaling.com [+] Source: http://blog.iancaling.com/post/155395764003 Vendor: ================= https://www.trangosys.com/ Product: ====================== -Altum AC600 Vulnerability Details: ===================== Trango Altum AC600a2s have a default root login (root:abcd1234) that is accessible via both SSH and telnet by default. Logging in as root on this device gives you access to a Linux shell, granting you full control over the device. These credentials are not mentioned in any manuals, or on Trango's website. Affected versions: ALL VERSIONS (as of 2016/01/06) Impact: The remote attacker has full control over the device, including shell access. This can lead to packet sniffing and tampering, denial of service, and even damage to the device. Disclosure Timeline: =================================== Vendor Notification: December 23, 2016 (no response received) Public Disclosure: January 4th, 2017 Exploitation Technique: ======================= Remote Severity Level: ================ Critical


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2018, cxsecurity.com

 

Back to Top