Vulnerability in Csl Dualcom Gprs

CVE-2015-7288

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 allow remote attackers to modify the configuration via a command in an SMS message, as demonstrated by a "4 2" command.

EPSS: 0.017 (74.1th percentile) — read the EPSS interpretation.

Affected products

Csl_dualcom Gprs — versions cs2300-r
Csl_dualcom Gprs_cs2300-r_firmware — versions 1.25, 3.53
N/a — versions n/a

Weakness classification (CWE)

CWE-254

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
cret@cert.org (Exploit, x_refsource_MISC)
cret@cert.org (x_refsource_CONFIRM, US Government Resource, Third Party Advisory)