CVE-2015-7286: Csl Dualcom Gprs CS2300-R Firmware

Medium severity, CVSS 6.4. EPSS: 2.1% chance of exploitation in the next 30 days.

CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 rely on a polyalphabetic substitution cipher with hardcoded keys, which makes it easier for remote attackers to defeat a cryptographic protection mechanism by capturing IP or V.22bis PSTN protocol traffic.

Affected products

• Csl Dualcom Gprs CS2300-R Firmware: version 1.25 only; version 3.53 only

Published 2015-11-25. Last modified 2026-06-17.