Auth bypass in Csl Dualcom Gprs

CVE-2015-7285

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 do not require authentication from Alarm Receiving Center (ARC) servers, which allows man-in-the-middle attackers to bypass intended access restrictions via a spoofed HSxx response.

Vulnerability class: Broken Authentication

EPSS: 0.015 (71.6th percentile) — read the EPSS interpretation.

Affected products

Csl_dualcom Gprs — versions cs2300-r
Csl_dualcom Gprs_cs2300-r_firmware — versions 1.25, 3.53
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
cret@cert.org (Exploit, x_refsource_MISC)
cret@cert.org (x_refsource_CONFIRM, US Government Resource, Third Party Advisory)