full-disclosure - [FD] Trango Altum AC600 Default root Login

Open Source and information security mailing list archives

Message-ID: <CAPifcoxAoHXpz_=teHDstrsrg9pmJ1EHKcFZXs09z0sGh-BrJA@mail.gmail.com>
Date: Fri, 6 Jan 2017 13:11:58 -0800
From: Ian Ling <iancling@...il.com>
To: fulldisclosure@...lists.org
Subject: [FD] Trango Altum AC600 Default root Login

[+] Credits: Ian Ling
[+] Website: iancaling.com
[+] Source: http://blog.iancaling.com/post/155395764003

Vendor:
=================
https://www.trangosys.com/

Product:
======================
-Altum AC600

Vulnerability Details:
=====================

Trango Altum AC600′s have a default root login (root:abcd1234) that is
accessible via both SSH and telnet by default. Logging in as root on this
device gives you access to a Linux shell, granting you full control over
the device. These credentials are not mentioned in any manuals, or on
Trango's website.

Affected versions:
ALL VERSIONS (as of 2016/01/06)

Impact:
The remote attacker has full control over the device, including shell
access. This can lead to packet sniffing and tampering, denial of service,
and even damage to the device.

Disclosure Timeline:
===================================
Vendor Notification: December 23, 2016 (no response received)
Public Disclosure: January 4th, 2017

Exploitation Technique:
=======================
Remote

Severity Level:
================
Critical

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives