CVE-2016-6551

high-risk

Published 2018-07-13

Intellian Satellite TV antennas t-Series and v-Series, firmware version 1.07, uses non-random default credentials of: ftp/ftp or intellian:12345678. A remote network attacker can gain elevated access to a vulnerable device.

Do I need to act?

0.62% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.8/10 Critical

NETWORK / LOW complexity

Affected Products (13)

V60 Firmware

V60Ka Firmware

V65 Firmware

V80G Firmware

T80W Firmware

T80Q Firmware

T100W Firmware

T100Q Firmware

T110W Firmware

T110Q Firmware

T130W Firmware

T130Q Firmware

T240Ck Firmware

Affected Vendors

Intelliantech

References (4)

Third Party Advisory http://www.securityfocus.com/bid/93808

Third Party Advisory https://www.kb.cert.org/vuls/id/200907

Third Party Advisory http://www.securityfocus.com/bid/93808

Third Party Advisory https://www.kb.cert.org/vuls/id/200907

/ 100

high-risk

Severity 32/34 · Critical

Exploitability 2/34 · Minimal

Exposure 17/34 · Moderate