Siklu Etherhaul Firmware vulnerabilities
2 known vulnerabilities affecting siklu/etherhaul_firmware.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2
Vulnerabilities
Page 1 of 1
CVE-2017-7318P2CRITICALCVSS 9.8≤ 7.3.02017-03-30
CVE-2017-7318 [CRITICAL] CVE-2017-7318: Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerabilit
Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication.
nvd
CVE-2016-10308P2CRITICALCVSS 9.8≤ 3.7.0v6.02017-03-30
CVE-2016-10308 [CRITICAL] CWE-798 CVE-2016-10308: Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with
Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the device, allowing full control over it.
nvd