Hidden Root Account with Unchangeable Password in Siklu EtherHaul Radios

CVE-2016-10308 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:C/A:C

Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the device, allowing full control over it.

Learn more about our Cis Benchmark Audit For Apple Ios.