[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Trango Altum AC600 Default Root Login Vulnerability

Author
Ian Ling
Risk
[
Security Risk Low
]
0day-ID
0day-ID-26638
Category
web applications
Date add
11-01-2017
Platform
hardware
[+] Credits: Ian Ling
[+] Website: iancaling.com
[+] Source: http://blog.iancaling.com/post/155395764003

Vendor:
=================
https://www.trangosys.com/

Product:
======================
-Altum AC600

Vulnerability Details:
=====================

Trango Altum AC600a2s have a default root login (root:abcd1234) that is
accessible via both SSH and telnet by default. Logging in as root on this
device gives you access to a Linux shell, granting you full control over
the device. These credentials are not mentioned in any manuals, or on
Trango's website.

Affected versions:
ALL VERSIONS (as of 2016/01/06)

Impact:
The remote attacker has full control over the device, including shell
access. This can lead to packet sniffing and tampering, denial of service,
and even damage to the device.


Disclosure Timeline:
===================================
Vendor Notification: December 23, 2016 (no response received)
Public Disclosure: January 4th, 2017

#  0day.today [2024-08-22]  #