Zhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote attackers to obtain access via a session on TCP port 23 or 9000.
Date: 2016-02
Affected: zhuhai/raysharp_firmware
Attack vector: other
Category: vulnerability-disclosure
Severity: Critical
CVE: CVE-2015-8286
CWE: CWE-254
CVSS: 9.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Zhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote attackers to obtain access via a session on TCP port 23 or 9000.


Mitigations:

Architectural layers (MAESTRO):