CVE-2016-10305 Trango Apex <= 2.1.1, ApexLynx < 2.0, ApexOrion < 2.0, ApexPlus <= 3.2.0, Giga <= 2.6.1, GigaLynx < 2.0, GigaOrion < 2.0, GigaPlus <= 3.2.3, GigaPro <= 1.4.1, StrataLink < 3.0, and StrataPro devices h...
CriticalCVSS 9.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Trango Apex <= 2.1.1, ApexLynx < 2.0, ApexOrion < 2.0, ApexPlus <= 3.2.0, Giga <= 2.6.1, GigaLynx < 2.0, GigaOrion < 2.0, GigaPlus <= 3.2.3, GigaPro <= 1.4.1, StrataLink < 3.0, and StrataPro devices have a built-in, hidden root account, with a default password that was once stored in cleartext within a software update package on a Trango FTP server. This account is accessible via SSH and/or TELNET, and grants access to the underlying embedded UNIX OS on the device, allowing full control over it.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gotrango apex plus firmware | <= 3.2.0 | No fix listed |
| gotrango apex firmware | <= 2.1.1 | No fix listed |
| gotrango apex lynx firmware | <= 1.2.3 | No fix listed |
| gotrango apex orion firmware | <= 1.2.3 | No fix listed |
| gotrango giga firmware | <= 2.6.1 | No fix listed |
| gotrango giga lynx firmware | <= 1.2.3 | No fix listed |
| gotrango giga orion firmware | <= 1.2.3 | No fix listed |
| gotrango giga plus firmware | <= 3.2.3 | No fix listed |
| gotrango giga pro firmware | <= 1.4.1 | No fix listed |
| gotrango stratalink pro firmware | All versions | No fix listed |
| gotrango stratalink firmware | <= 2.2.0 | No fix listed |
References
- blog.iancaling.com exploit third-party-advisory