Approved changes feed: RSS · Atom

cpe:2.3:h:csl_dualcom:gprs:cs2300-r:*:*:*:*:*:*:*

part: h version: cs2300-r update: *

VendorCsl Dualcom (e3a94eb8-634d-5d33-bb13-6efa9eae6f30)
ProductGprs (b2804df7-7aa4-5af2-b461-ef09514fbc43)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-7288 not_vulnerable 2026-06-08 05:07:00.302226 Details available
CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 allow remote attackers to modify the configuration via a command in an SMS message, as demonstrated by a "4 2" command.
Published: 2015-11-25T02:00:00.000Z
Updated: 2024-08-06T07:43:46.133Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7287 not_vulnerable 2026-06-08 05:07:00.301880 Details available
CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different customers' installations, which allows remote attackers to execute commands by leveraging knowledge of this PIN and including it in an SMS message.
Published: 2015-11-25T02:00:00.000Z
Updated: 2024-08-06T07:43:46.131Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7286 not_vulnerable 2026-06-08 05:07:00.301510 Details available
CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 rely on a polyalphabetic substitution cipher with hardcoded keys, which makes it easier for remote attackers to defeat a cryptographic protection mechanism by capturing IP or V.22bis PSTN protocol traffic.
Published: 2015-11-25T02:00:00.000Z
Updated: 2024-08-06T07:43:46.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-7285 not_vulnerable 2026-06-08 05:07:00.301031 Details available
CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 do not require authentication from Alarm Receiving Center (ARC) servers, which allows man-in-the-middle attackers to bypass intended access restrictions via a spoofed HSxx response.
Published: 2015-11-25T02:00:00.000Z
Updated: 2024-08-06T07:43:46.169Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.