6.4

CVE-2015-7286

Exploit
CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 rely on a polyalphabetic substitution cipher with hardcoded keys, which makes it easier for remote attackers to defeat a cryptographic protection mechanism by capturing IP or V.22bis PSTN protocol traffic.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Csl Dualcom ≫ Gprs Cs2300-r Firmware Version1.25
   Csl Dualcom ≫ Gprs Versioncs2300-r
Csl Dualcom ≫ Gprs Cs2300-r Firmware Version3.53
   Csl Dualcom ≫ Gprs Versioncs2300-r
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.06% 0.837
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.kb.cert.org/vuls/id/428280
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/BLUU-A3NQAL
Third Party Advisory
US Government Resource