What is CVE-2016-2333?

CVE-2016-2333 is a high-severity vulnerability in Systech Syslink Sl-1000 Modular Gateway, classified under Cryptographic Issues. CVSS score: 7.5/10. Published 2016-04-25.

How severe is CVE-2016-2333?

High severity. CVSS v3 base score is 7.5 out of 10.

Is CVE-2016-2333 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Systech Syslink Sl-1000 Modular Gateway

CVE-2016-2333

SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 use the same hardcoded encryption key across different customers' installations, which allows attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.008 (51.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Systech Syslink_sl-1000_modular_gateway
Systech Syslink_sl-1000_modular_gateway_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

Public proof-of-concept exploits

ivision-research/disclosures

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2016-2333?: CVE-2016-2333 is a high-severity vulnerability in Systech Syslink Sl-1000 Modular Gateway, classified under Cryptographic Issues. CVSS score: 7.5/10. Published 2016-04-25.
How severe is CVE-2016-2333?: High severity. CVSS v3 base score is 7.5 out of 10.
Is CVE-2016-2333 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.