CVE-2016-10306 Trango Altum AC600 devices have a built-in, hidden root account, with a default password of abcd1234. This account is accessible via SSH and/or TELNET, and grants access to the underlying embedded UNI...
CriticalCVSS 9.8
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Trango Altum AC600 devices have a built-in, hidden root account, with a default password of abcd1234. This account is accessible via SSH and/or TELNET, and grants access to the underlying embedded UNIX OS on the device, allowing full control over it.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trango a600 firmware | All versions | No fix listed |
References
- blog.iancaling.com third-party-advisory
- blog.iancaling.com third-party-advisory
- 97241 third-party-advisory vdb-entry