---
id: CVE-2015-10148
title: >-
  Hirschmann HiLCOS devices OpenBAT, WLC, BAT300, BAT54 prior to 8.80 and
  OpenBAT prior to 9.10 are shipped with identical default SSH and SSL keys that
  cannot be changed, allowing unauthenticated remote attackers to decrypt or
  intercept e…
summary: >-
  Hirschmann HiLCOS devices OpenBAT, WLC, BAT300, BAT54 prior to 8.80 and
  OpenBAT prior to 9.10 are shipped with identical default SSH and SSL keys that
  cannot be changed, allowing unauthenticated remote attackers to decrypt or
  intercept e…
severity: high
cvss: 8.2
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N'
cwe:
  - CWE-321
published: '2026-04-03'
updated: '2026-07-21'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2015-10148'
references:
  - url: >-
      https://assets.belden.com/m/76d31798e65c9f47/original/Security-Bulletin-SSH-SSL-Default-Keys-HiLCOS-Hirschmann-BSECV-2015-12.pdf
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/hirschmann-hilcos-hard-coded-credentials-ssh-ssl-keys
    label: disclosure@vulncheck.com
tags:
  - nvd
epss: 0.00291
epssPercentile: 0.21852
ingestedAt: '2026-07-21T16:51:40.647Z'
---

## Overview

Hirschmann HiLCOS devices OpenBAT, WLC, BAT300, BAT54 prior to 8.80 and OpenBAT prior to 9.10 are shipped with identical default SSH and SSL keys that cannot be changed, allowing unauthenticated remote attackers to decrypt or intercept encrypted management communications. Attackers can perform man-in-the-middle attacks, impersonate devices, and expose sensitive information by leveraging the shared default cryptographic keys across multiple devices.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.