CVE-2017-7318
CriticalSummary
Siklu EtherHaul devices before version 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication.
Risk Assessment
This vulnerability poses a serious risk to organizations as it allows attackers to access sensitive data without authorization. This could lead to a loss of confidentiality of information and potential further attacks on the infrastructure.
Recommendation
It is recommended to update Siklu EtherHaul devices to version 7.4.0 or later to mitigate this vulnerability. Additionally, implementing further security measures such as network segmentation and traffic monitoring is advisable.
Original NVD description (English source)
Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication.