[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2016-10308":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":25,"cwes":26,"cpes":28,"technologies":37,"references":45,"score":48,"epss_score":49,"epss_percentile":50,"is_kev":51,"cisa_kev_date_added":52,"cisa_kev_due_date":52,"cisa_ssvc":53,"attack_mappings":59,"exploits":85},188193,"CVE-2016-10308","EUVD-2016-1493","Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the device, allowing full control over it.","2017-03-30T07:59:00Z",{"cvss_v2.0":10,"cvss_v3.0":18},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",10,"NETWORK","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","NONE","COMPLETE","LOW",{"scope":19,"version":20,"baseScore":21,"attackVector":13,"baseSeverity":22,"vectorString":23,"integrityImpact":24,"userInteraction":15,"attackComplexity":17,"availabilityImpact":24,"privilegesRequired":15,"confidentialityImpact":24},"UNCHANGED","3.0",9.8,"CRITICAL","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","HIGH",true,[27],"CWE-798",[29,30,31,32,33,34,35,36],"cpe:2.3:o:siklu:etherhaul_firmware:6.0:*:*:*:*:*:*:*","cpe:2.3:o:siklu:etherhaul_firmware:*:*:*:*:*:*:*:*","cpe:2.3:h:siklu:etherhaul-5500fd:-:*:*:*:*:*:*:*","cpe:2.3:h:siklu:etherhaul_70\\\u002F80ghz_multi-gigabit_e-band_radio:-:*:*:*:*:*:*:*","cpe:2.3:h:siklu:etherhaul_70ghz_e-band_radio:-:*:*:*:*:*:*:*","cpe:2.3:h:siklu:etherhaul_70\\\u002F80ghz_gigabit_radio:-:*:*:*:*:*:*:*","cpe:2.3:h:siklu:etherhaul_500tx:-:*:*:*:*:*:*:*","cpe:2.3:h:siklu:etherhaul_60ghz_v-band_radio:-:*:*:*:*:*:*:*",[38,39,40,41,42,43,44],"Siklu Etherhaul 500Tx","Siklu Etherhaul 60Ghz V-Band Radio","Siklu Etherhaul Firmware","Siklu Etherhaul 70\\\u002F80Ghz Multi-Gigabit E-Band Radio","Siklu Etherhaul-5500Fd","Siklu Etherhaul 70\\\u002F80Ghz Gigabit Radio","Siklu Etherhaul 70Ghz E-Band Radio",[46,47],"http:\u002F\u002Fblog.iancaling.com\u002Fpost\u002F145309944453","http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F97243",0.84,0.0296,0.87128,false,null,{"timestamp":52,"automatable":54,"tech_impact":55,"exploitation":56,"cisa_decision":57,"cisa_remediation_timeline":58},"no","partial","none",{},"FSU",[60,66,77],{"name":61,"source":62,"tactics":63,"technique_id":65},"Exploit Public-Facing Application","attack_vector",[64],"initial-access","T1190",{"name":67,"source":68,"cwe_ids":69,"tactics":70,"capec_ids":74,"technique_id":76},"Default Accounts","capec",[27],[64,71,72,73],"persistence","privilege-escalation","stealth",[75],"CAPEC-70","T1078.001",{"name":78,"source":68,"cwe_ids":79,"tactics":80,"capec_ids":82,"technique_id":84},"Credentials In Files",[27],[81],"credential-access",[83],"CAPEC-191","T1552.001",[86],{"link":46}]