CVE-2016-10308

N/A

Published: March 30, 2017 at 07:00 AM UTC

Updated: June 17, 2026 at 12:39 AM UTC

7 products affected across 1 vendorEtherhaul FirmwareEtherhaul 70Ghz E-Band RadioEtherhaul 70/80Ghz Multi-Gigabit E-Band Radio

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 3%

Description

Siklu EtherHaul radios before 3.7.1 and 6.x before 6.9.0 have a built-in, hidden root account, with an unchangeable password that is the same across all devices. This account is accessible via both SSH and the device's web interface and grants access to the underlying embedded Linux OS on the device, allowing full control over it.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Etherhaul Firmware · Siklu

95%

v ≤ 3.7.06.0

siklu-etherhaul-500tx (same device) · siklu-etherhaul-5500fd (same device) · siklu-etherhaul-60ghz-v-band-radio (same device) · siklu-etherhaul-70-80ghz-gigabit-radio (same device) · siklu-etherhaul-70-80ghz-multi-gigabit-e-band-radio (same device) · siklu-etherhaul-70ghz-e-band-radio (same device)

Etherhaul 500Tx · Sikludevice

80%

All versions

Etherhaul-5500Fd · Sikludevice

80%

All versions

Etherhaul 60Ghz V-Band Radio · Sikludevice

80%

All versions

Etherhaul 70/80Ghz Gigabit Radio · Sikludevice

80%

All versions