CVE-2016-2331
CriticalSummary
The web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 has a default password, which makes it easier for remote attackers to obtain access via unspecified vectors.
Risk Assessment
The default password increases the risk of unauthorized access to the devices, which can lead to serious security breaches within the organization.
Recommendation
It is recommended to immediately change the default password to a strong and unique one to minimize the risk of attacks.
Other vulnerabilities in SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway
See all- CVE-2016-2333High
SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before version 01A.8 use the same hardcoded encryption key across different customers' installations, allowing attackers to defeat cryptographic protection mechanisms.
- CVE-2016-2332High
The web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before version 01A.8 has a vulnerability in the flu.cgi file that allows remote authenticated users to execute arbitrary commands via the 5066 (dnsmasq) parameter.
Original NVD description (English source)
The web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 has a default password, which makes it easier for remote attackers to obtain access via unspecified vectors.