CVE-2018-12526 Hardcoded credentials in n/a
Remote attackers can gain unauthorized access to Telesquare SDT devices via TELNET using hardcoded default factory credentials.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-12526?
CVE-2018-12526 is a critical vulnerability in n/a, published on 21 Jun 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Telesquare SDT-CS3B1 and SDT-CW3B1 devices through 1.2.0 have a default factory account. Remote attackers can obtain access to the device via TELNET using a hardcoded account.
Weakness: CWE-798
Which versions are affected by CVE-2018-12526?
It affects 2 products.
Products include Telesquare Sdt-Cs3b1 Firmware, Telesquare Sdt-Cw3b1 Firmware.
How do I fix CVE-2018-12526?
No fix has been published for CVE-2018-12526 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-12526 being exploited?
There is no known exploitation of CVE-2018-12526 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2021-46422 Command injection in n/a
- CVE-2017-20223 Telesquare SKT LTE Router SDT-CS3B1 Insecure Direct Object Reference
- CVE-2017-20224 Telesquare SKT LTE Router SDT-CS3B1 WebDAV Arbitrary File Upload
- CVE-2017-20222 Telesquare SKT LTE Router SDT-CS3B1 Unauthenticated Remote Reboot
- CVE-2017-20221 Telesquare SKT LTE Router SDT-CS3B1 CSRF System Command Execution
Sources
Also known as GHSA-w3c5-8x57-2gwg.