Critical severity9.8NVD Advisory· Published Mar 30, 2017· Updated Jun 17, 2026

CVE-2016-10306

Description

Trango Altum AC600 devices have a built-in, hidden root account, with a default password of abcd1234. This account is accessible via SSH and/or TELNET, and grants access to the underlying embedded UNIX OS on the device, allowing full control over it.

Affected products

Gotrango/A600 Firmware
cpe:2.3:o:trango:a600_firmware:-:*:*:*:*:*:*:*
Gotrango/Altum AC600llm-create

Patches

Vulnerability mechanics

References

blog.iancaling.com/post/153011925478nvdThird Party Advisory
blog.iancaling.com/post/155395764003nvdThird Party Advisory
www.securityfocus.com/bid/97241nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000