SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway vulnerabilities
3 known CVE vulnerabilities in SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway, translated and rated.
- CVE-2016-2333High
SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before version 01A.8 use the same hardcoded encryption key across different customers' installations, allowing attackers to defeat cryptographic protection mechanisms.
- CVE-2016-2332High
The web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before version 01A.8 has a vulnerability in the flu.cgi file that allows remote authenticated users to execute arbitrary commands via the 5066 (dnsmasq) parameter.
- CVE-2016-2331Critical
The web interface on SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 has a default password, which makes it easier for remote attackers to obtain access via unspecified vectors.