What’s Vulnerable › Vulnerabilities

CVE-2015-7287

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2015-11-25 · updated 2026-06-17
• Weakness: CWE-255

Description

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations, which allows remote attackers to execute commands by leveraging knowledge of this PIN and including it in an SMS message.

Affected products

• Csl Dualcom Gprs Cs2300-R Firmware: 1.25, 3.53

References

• http://cybergibbons.com/?p=2844
• http://www.kb.cert.org/vuls/id/428280
• http://www.kb.cert.org/vuls/id/BLUU-A3NQAL
• http://cybergibbons.com/?p=2844
• http://www.kb.cert.org/vuls/id/428280
• http://www.kb.cert.org/vuls/id/BLUU-A3NQAL

Get alerted when CVE-2015-7287 or the next vulnerability affects your stack