CVE-2016-6551 — CRITICAL (9.8)

Vulnerability Description

Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access to a vulnerable device.

CVSS Score

9.8

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Intelliantech	V60 Firmware	1.07
Intelliantech	V60	-
Intelliantech	V60Ka Firmware	1.07
Intelliantech	V60Ka	-
Intelliantech	V65 Firmware	1.07
Intelliantech	V65	-
Intelliantech	V80G Firmware	1.07
Intelliantech	V80G	-
Intelliantech	T80W Firmware	1.07
Intelliantech	T80W	-
Intelliantech	T80Q Firmware	1.07
Intelliantech	T80Q	-
Intelliantech	T100W Firmware	1.07
Intelliantech	T100W	-
Intelliantech	T100Q Firmware	1.07
Intelliantech	T100Q	-
Intelliantech	T110W Firmware	1.07
Intelliantech	T110W	-
Intelliantech	T110Q Firmware	1.07
Intelliantech	T110Q	-

Related Weaknesses (CWE)

CWE-255

References

http://www.securityfocus.com/bid/93808Third Party AdvisoryVDB Entry
https://www.kb.cert.org/vuls/id/200907Third Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/93808Third Party AdvisoryVDB Entry
https://www.kb.cert.org/vuls/id/200907Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2016-6551?

CVE-2016-6551 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access ...

How severe is CVE-2016-6551?

CVE-2016-6551 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2016-6551?

Check the references section above for vendor advisories and patch information. Affected products include: Intelliantech V60 Firmware, Intelliantech V60, Intelliantech V60Ka Firmware, Intelliantech V60Ka, Intelliantech V65 Firmware.