VULNERABILITY INTELLIGENCE

CVE-2016-10306

CVSS score9.8 CRITICAL
EPSS probability2.71%
CISA KEVNot currently listed
Published2017-03-30
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Trango Altum AC600 devices have a built-in, hidden root account, with a default password of abcd1234. This account is accessible via SSH and/or TELNET, and grants access to the underlying embedded UNIX OS on the device, allowing full control over it.

Weakness classification

  • CWE-798: Use of Hard-coded Credentials

Primary references