CVE-2015-10148

Name of the Vulnerable Software and Affected Versions Hirschmann HiLCOS OpenBAT, WLC, BAT300, BAT54 versions prior to 8.80 Hirschmann HiLCOS OpenBAT versions prior to 9.10

Description Devices are shipped with identical default SSH and SSL keys that cannot be changed. This allows unauthenticated remote attackers to decrypt or intercept encrypted management communications. By leveraging these shared default cryptographic keys across multiple devices, attackers can perform man-in-the-middle attacks, impersonate devices, and expose sensitive information.

Recommendations Update HiLCOS OpenBAT, WLC, and BAT300, BAT54 to version 8.80 or later. Update HiLCOS OpenBAT to version 9.10 or later.