CVE-2015-7285: Csl Dualcom Gprs CS2300-R Firmware

Medium severity, CVSS 5.8. EPSS: 1.5% chance of exploitation in the next 30 days.

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 do not require authentication from Alarm Receiving Center (ARC) servers, which allows man-in-the-middle attackers to bypass intended access restrictions via a spoofed HSxx response.

Affected products

• Csl Dualcom Gprs CS2300-R Firmware: version 1.25 only; version 3.53 only

Published 2015-11-25. Last modified 2026-06-17.