CVE Vulnerabilities

CVE-2015-7286

Published: Nov 25, 2015 | Modified: Nov 27, 2015
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.4 MEDIUM
AV:N/AC:L/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 rely on a polyalphabetic substitution cipher with hardcoded keys, which makes it easier for remote attackers to defeat a cryptographic protection mechanism by capturing IP or V.22bis PSTN protocol traffic.

Affected Software

Name Vendor Start Version End Version
Gprs_cs2300-r_firmware Csl_dualcom 1.25 1.25
Gprs_cs2300-r_firmware Csl_dualcom 3.53 3.53

References