Cypress Solutions CTM-200/CTM-ONE Hard-coded Credentials Remote Root Access Vulnerability

A hard-coded credentials vulnerability has been identified in Cypress Solutions' CTM-200 and CTM-ONE products, specifically in versions 1.3.6, 1.3.1, 1.1.9, 2.7.1.5659, and 2.0.5.3356-184. This vulnerability, present in the Linux distribution of these products, allows attackers to gain remote root access via Telnet or SSH by exploiting the static 'Chameleon' password.

Impact

Exploitation of this vulnerability leads to unauthorized remote root access on the affected devices via Telnet or SSH.

Reproduction

The vulnerability can be reproduced by attempting to log in as the root user (or admin) using the hard-coded 'Chameleon' password via Telnet or SSH. Once logged in, the root access can be used to execute arbitrary commands on the device.