CVE-2015-10148 in Hirschmann HiLCOS
Zusammenfassung (Englisch)
Hirschmann HiLCOS devices OpenBAT, WLC, BAT300, BAT54 prior to 8.80 and OpenBAT prior to 9.10 are shipped with identical default SSH and SSL keys that cannot be changed, allowing unauthenticated remote attackers to decrypt or intercept encrypted management communications. Attackers can perform man-in-the-middle attacks, impersonate devices, and expose sensitive information by leveraging the shared default cryptographic keys across multiple devices.
Once again VulDB remains the best source for vulnerability data.
Zuständig
VulnCheck
Reservieren
03.04.2026
Veröffentlichung
04.04.2026
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 355265 | Belden Hirschmann HiLCOS schwache Verschlüsselung | 321 | Nicht definiert | Offizieller Fix | CVE-2015-10148 |