CVE-2016-10306

Critical

Published: 30/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Trango Altum AC600 devices have a built-in, hidden root account with a default password of abcd1234. This account is accessible via SSH and/or TELNET, allowing full control over the underlying embedded UNIX OS on the device.

Risk Assessment

Access to the root account with a default password poses a serious security risk, allowing unauthorized users full control over the device.

Recommendation

It is recommended to immediately change the default password and disable access to the root account to minimize the risk of unauthorized access.

Original NVD description (English source)

Trango Altum AC600 devices have a built-in, hidden root account, with a default password of abcd1234. This account is accessible via SSH and/or TELNET, and grants access to the underlying embedded UNIX OS on the device, allowing full control over it.