CVE-2015-7285

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 do not require authentication from Alarm Receiving Center (ARC) servers, which allows…

published November 25, 2015

CVSS
—
EPSS
1%
Percentile
73.9
In the wild
Unconfirmed
What it is

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 do not require authentication from Alarm Receiving Center (ARC) servers, which allows man-in-the-middle attackers to bypass intended access restrictions via a spoofed HSxx response.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01497 · 73.9th percentile
Published
2015-11-25T02:00Z
EPSS history
Timeline
  • 25 NOV 02:00Z
    CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 do not require authentication from Alarm Receiving Center (ARC) servers, which allows…
    cvelistv5