CVE-2016-6551 Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses default credentials
Remote attackers can gain elevated access to Intellian satellite antennas using default FTP and admin credentials.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-6551?
CVE-2016-6551 is a critical vulnerability in Intellian Satellite TV Antennas, published on 13 Jul 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access to a vulnerable device.
Weakness: CWE-255
Which versions are affected by CVE-2016-6551?
It affects 13 products.
Products include Intelliantech T100q Firmware, Intelliantech T100w Firmware, Intelliantech T110q Firmware, Intelliantech T110w Firmware, Intelliantech T130q Firmware, Intelliantech T130w Firmware and 7 more.
How do I fix CVE-2016-6551?
No fix has been published for CVE-2016-6551 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-6551 being exploited?
There is no known exploitation of CVE-2016-6551 in the wild and no public exploit code.
Sources
Also known as GHSA-jq64-pj79-mg78.