CVE-2015-7287: CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across di...

Security readout for executives and security teams

Some CSL DualCom GPRS CS2300-R alarm communicators used the same default PIN across customer installations. A remote attacker who knows that PIN could send SMS-based commands to affected devices. The source bundle does not provide CVSS scoring, active exploitation evidence, or confirmed patch details. Exposure is most likely in organizations using CSL DualCom GPRS CS2300-R alarm signaling devices with firmware 1.25 through 3.53, especially if SMS management remains enabled and default authorization settings persist. Prioritize environments where these devices protect physical security, alarm signaling, or critical sites. Treat confirmed affected deployments as high urgency because compromise could affect command control of security equipment, even though exploitation evidence is not established in the provided sources. Mitigation focus: Inventory CS2300-R devices and confirm firmware versions.; Review CERT and vendor guidance for supported remediation.; Replace the shared default PIN if vendor-supported..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.