CVE-2016-2333

SysLINK SL-1000 Machine-to-Machine (M2M) Modular Gateway devices with firmware before 01A.8 use the same hardcoded encryption key across different customers' installations, which allows attackers to defeat cryptographic protection mechanisms by leveraging knowledge of this key from another installation.

Score

CVSS 3.0 7.5 High

Status

Modified - cret@cert.org

Published

2016-04-25

Last modified

2024-08-05

Weaknesses

CWE-310

Affected products

• Syslink Sl-1000 Modular Gateway Firmware (Systech)

References

• http://www.kb.cert.org/vuls/id/822980