CVE-2016-10306: Trango Altum AC600 devices have a built-in, hidden root account, with a default password of abcd1234.

Security readout for executives and security teams

CVE-2016-10306 describes a hidden root account on Trango Altum AC600 devices with a known default password. If SSH or Telnet is reachable, an unauthorized person could gain full control of the device’s embedded UNIX operating system. Public sources do not show a CVSS score, vendor fix, or active exploitation evidence. Exposure is most likely where Trango Altum AC600 management services are reachable from untrusted networks, especially SSH or Telnet. Risk is lower when management access is isolated to a restricted administrative network. Prioritize any exposed Altum AC600 devices because this flaw can allow full device takeover. The main business risk is loss of control over wireless infrastructure, with potential disruption or pivoting through management access. Mitigation focus: Inventory Trango Altum AC600 devices and their firmware versions.; Restrict SSH and Telnet access to trusted administrative networks only.; Disable Telnet and SSH where operationally unnecessary..

Prepared

Jun 13, 2026, 05:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.