CVE-2015-7911

Critical

Published: 23/12/2015(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Saia Burgess devices PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, PCD7.D4xxxT5F, and PCD3.T665 and PCD3.T666 before versions 1.24.50 and 1.24.41 have hardcoded credentials, allowing remote attackers to gain administrative access via an FTP session.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to systems, posing a serious threat to the security of data and organizational operations.

Recommendation

It is recommended to update the devices to the latest software versions to remove hardcoded credentials and secure access to the systems.

Original NVD description (English source)

Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices before 1.24.50 and PCD3.T665 and PCD3.T666 devices before 1.24.41 have hardcoded credentials, which allows remote attackers to obtain administrative access via an FTP session.