CVE-2015-7276 — MEDIUM (5.9)

Vulnerability Description

Technicolor C2000T and C2100T uses hard-coded cryptographic keys.

CVSS Score

5.9

MEDIUM

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Technicolor	C2000T Firmware	-
Technicolor	C2000T	-
Technicolor	C2100T Firmware	-
Technicolor	C2100T	-

Related Weaknesses (CWE)

CWE-798

References

http://www.kb.cert.org/vuls/id/566724Third Party AdvisoryUS Government Resource
https://sec-consult.com/en/blog/2015/11/house-of-keys-industry-wide-https/Third Party Advisory
http://www.kb.cert.org/vuls/id/566724Third Party AdvisoryUS Government Resource
https://sec-consult.com/en/blog/2015/11/house-of-keys-industry-wide-https/Third Party Advisory

FAQ

What is CVE-2015-7276?

CVE-2015-7276 is a vulnerability with a CVSS score of 5.9 (MEDIUM). Technicolor C2000T and C2100T uses hard-coded cryptographic keys.

How severe is CVE-2015-7276?

CVE-2015-7276 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-7276?

Check the references section above for vendor advisories and patch information. Affected products include: Technicolor C2000T Firmware, Technicolor C2000T, Technicolor C2100T Firmware, Technicolor C2100T.