CVE-2018-12526

Name of the Vulnerable Software and Affected Versions Telesquare SDT-CS3B1 and SDT-CW3B1 devices versions prior to 1.2.0 Telesquare SDT-CS3B1 and SDT-CW3B1 devices version 1.2.0

Description The issue concerns a default factory account in the devices. Remote attackers can obtain access to the device via TELNET using a hardcoded account.

Recommendations For Telesquare SDT-CS3B1 and SDT-CW3B1 devices versions prior to 1.2.0, update to a version later than 1.2.0 to remove the default factory account. For Telesquare SDT-CS3B1 and SDT-CW3B1 devices version 1.2.0, update to a version later than 1.2.0 to remove the default factory account. As a temporary workaround, consider disabling TELNET access to the device until a patch is available.