CVE-2015-7286: CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 rely on a polyalphabetic substitution cip...

Security readout for executives and security teams

CSL DualCom GPRS CS2300-R alarm communication devices used firmware crypto that can be defeated if an attacker captures its IP or V.22bis PSTN traffic. This weakens confidentiality and trust in security signaling. The sources do not provide a CVSS score, active exploitation evidence, or a confirmed fix. Organizations with CSL DualCom GPRS CS2300-R devices running firmware 1.25 through 3.53 are the named exposure group. Exposure depends on whether device communications can be captured on IP networks or PSTN paths. The source bundle does not identify other affected products. Handle as a targeted exposure review for physical security monitoring environments. It is not KEV-listed and has no provided CVSS score, but affected devices may protect alarm communications. Prioritize inventory, vendor confirmation, and remediation planning for any deployed CS2300-R units. Mitigation focus: Inventory CSL DualCom GPRS CS2300-R units and record firmware versions.; Check CERT and vendor guidance for firmware updates, replacement, or compensating controls.; Reduce unnecessary network exposure for device communication paths where operationally possible..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.