Approved changes feed: RSS · Atom

cpe:2.3:o:siklu:etherhaul_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSiklu (74d921a9-9093-51ca-a52e-be7d7d955e9a)
ProductEtherhaul Firmware (e7f3381f-e166-5179-be87-367a73bf3a1a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7318 vulnerable 2026-06-03 14:37:31.781753 Details available
Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability. This vulnerability allows a remote attacker to execute commands and retrieve information such as usernames and plaintext passwords from the device with no authentication.
Published: 2017-03-30T07:00:00.000Z
Updated: 2024-08-05T15:56:36.408Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10308 vulnerable 2026-06-03 14:35:23.800524 Details available
Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the device, allowing full control over it.
Published: 2017-03-30T07:00:00.000Z
Updated: 2024-08-06T03:14:42.946Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.