Trango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion 2.0, and StrataLink 3.0 devices have a built-in, hidden root account, with a default password for which the MD5 hash value is public (but the cleartext value is perhaps not yet public). This account is accessible via SSH...
Vendor
gotrango vulnerabilities
2 published CVES affecting gotrango, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 2
- Critical
- 2
- High
- 0
- Medium
- 0
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- apex lynx firmware 2
- apex orion firmware 2
- giga lynx firmware 2
- giga orion firmware 2
- stratalink firmware 2
- apex firmware 1
- apex plus firmware 1
- giga firmware 1
- giga plus firmware 1
- giga pro firmware 1
- stratalink pro firmware 1
Latest gotrango CVEs
Newest publication first
-
CriticalCVSS 9.8 EPSS 2.4%
-
CriticalCVSS 9.8 EPSS 1.7%
Trango Apex <= 2.1.1, ApexLynx < 2.0, ApexOrion < 2.0, ApexPlus <= 3.2.0, Giga <= 2.6.1, GigaLynx < 2.0, GigaOrion < 2.0, GigaPlus <= 3.2.3, GigaPro <= 1.4.1, StrataLink < 3.0, and StrataPro devices have a built-in, hidden root account, with a default password that was once store...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.