CVE-2016-4521 Sixnet BT-5xxx and BT-6xxx M2M devices before 3.8.21 and 3.9.x before 3.9.8 have hardcoded credentials, which allows remote attackers to obtain access via unspecified vectors.
CriticalCVSS 9.8
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sixnet BT-5xxx and BT-6xxx M2M devices before 3.8.21 and 3.9.x before 3.9.8 have hardcoded credentials, which allows remote attackers to obtain access via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sixnet bt-5 series cellular router firmware | <= 3.8.20 | No fix listed |
| sixnet bt-5 series cellular router firmware | <= 3.9.7 | No fix listed |
| sixnet bt-6 series cellular router firmware | <= 3.8.20 | No fix listed |
| sixnet bt-6 series cellular router firmware | <= 3.9.7 | No fix listed |
References
- ics-cert.us-cert.gov third-party-advisory us-government-resource