CVE-2015-10148
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
Hirschmann HiLCOS devices (OpenBAT, WLC, BAT300, BAT54) before version 8.80 and OpenBAT before 9.10 are shipped with identical default SSH and SSL keys that cannot be changed. This allows unauthenticated remote attackers to decrypt or intercept encrypted management communications.
Risk Assessment
The organization is at risk of man-in-the-middle attacks, device impersonation, and exposure of sensitive information due to shared default cryptographic keys across multiple devices.
Recommendation
Immediately update the device firmware to version 8.80 or later (for OpenBAT to 9.10 or later) and change the default SSH and SSL keys to unique ones for each device.
Other vulnerabilities in Hirschmann HiLCOS
See all- CVE-2021-4477Critical
Hirschmann HiLCOS OpenBAT and BAT450 products contain a firewall bypass vulnerability in IPv6 IPsec deployments. Traffic from VPN connections can bypass configured firewall rules. Attackers can exploit this by establishing IPv6 IPsec connections (IKEv1 or IKEv2) while using an IPv6 Internet connection to circumvent firewall policy enforcement.
- CVE-2017-20233Medium
Hirschmann HiLCOS products (OpenBAT, BAT450, WLC, BAT867) have a firewall filtering vulnerability that fails to correctly filter IPv4 multicast and broadcast traffic when management IP address filtering is disabled, allowing configured filter rules to be bypassed.
Original NVD description (English source)
Hirschmann HiLCOS devices OpenBAT, WLC, BAT300, BAT54 prior to 8.80 and OpenBAT prior to 9.10 are shipped with identical default SSH and SSL keys that cannot be changed, allowing unauthenticated remote attackers to decrypt or intercept encrypted management communications. Attackers can perform man-in-the-middle attacks, impersonate devices, and expose sensitive information by leveraging the shared default cryptographic keys across multiple devices.