Siklu records
4 published records for vendor siklu.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-284 Improper Access Control1
- CWE-522 Insufficiently Protected Credentials1
- CWE-798 Use of Hard-coded Credentials1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2017-7318No exploit | Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability.siklu · etherhaul firmware | Critical9.8 | — | 4.2% | Mar 30, 2017 |
40Plan | CVE-2016-10308No exploit | Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the samsiklu · etherhaul firmware · CWE-798 | Critical9.8 | — | 2.9% | Mar 30, 2017 |
39Monitor | CVE-2022-47036No exploit | Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on an CWE-284 | Critical9.8 | — | 0.5% | Mar 17, 2024 |
30Monitor | CVE-2022-47037No exploit | Siklu TG Terragraph devices before 2.1.1 allow attackers to discover valid, randomly generated credentials via GetCredentials.siklu · tg firmware · CWE-522 | High7.5 | — | 0.5% | Mar 17, 2024 |
- CVE-2017-731840Plan
Siklu EtherHaul devices before 7.4.0 are vulnerable to a remote command execution (RCE) vulnerability.
CriticalCVSS 9.8No exploitEPSS 4%siklu · etherhaul firmwareMar 30, 2017
- CVE-2016-1030840Plan
Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the sam
CriticalCVSS 9.8No exploitEPSS 2%siklu · etherhaul firmwareMar 30, 2017
- CVE-2022-4703639Monitor
Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on an
CriticalCVSS 9.8No exploitEPSS 0%Mar 17, 2024
- CVE-2022-4703730Monitor
Siklu TG Terragraph devices before 2.1.1 allow attackers to discover valid, randomly generated credentials via GetCredentials.
HighCVSS 7.5No exploitEPSS 0%siklu · tg firmwareMar 17, 2024