VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 30, 2017· Updated Jun 17, 2026

CVE-2016-10308

CVE-2016-10308

Description

Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the device, allowing full control over it.

Affected products

3
  • Siklu/Etherhaul Firmware2 versions
    cpe:2.3:o:siklu:etherhaul_firmware:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:siklu:etherhaul_firmware:*:*:*:*:*:*:*:*range: <=3.7.0
    • cpe:2.3:o:siklu:etherhaul_firmware:6.0:*:*:*:*:*:*:*
  • Siklu/EtherHaul 8010llm-fuzzy
    Range: <3.7.1, <6.9.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.