CVE-2016-10307: Trango ApexLynx 2.0, ApexOrion 2.0, GigaLynx 2.0, GigaOrion 2.0, and StrataLink 3.0 devices have a built-in...

Security readout for executives and security teams

Certain Trango wireless devices contain a hidden root account with a default password hash that was public. If an attacker can reach SSH or Telnet and authenticate, they can gain full control of the device’s embedded UNIX operating system. Exposure is most likely where the listed Trango devices and versions are deployed and management access via SSH or Telnet is reachable from untrusted networks or broad internal networks. Treat as high priority for networks using these devices, especially if management interfaces are reachable beyond a tightly controlled admin segment. The issue can lead to full device takeover, but available sources do not confirm active exploitation or a named patch. Mitigation focus: Inventory the named Trango device models and versions.; Restrict SSH and Telnet management access to trusted administrative networks.; Disable Telnet and unnecessary remote management services where supported..

Prepared

Jun 13, 2026, 05:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.