The Patching Friars' AlmanacA calendar of CVE saints

Patron of April 6

energetic/wirelessHoly card for energetic-wireless, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 energetic/wireless CLAVIS IN FABRICA
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Energetic, Protector of Wireless

Patron of microwave radios, factory-written passwords, and engineers who always want a way in.

Life

In 2017 it emerged that DragonWave Horizon radios contained hardcoded credentials meant for vendor access: username energetic, password wireless. They worked through the web interface and over Telnet, on every unit alike. A pair of words so cheerful it sounds like a slogan, and so well known it became a CVE.

Prayer

O Saint Energetic, who opens every radio with your name and your brother Wireless's, let no vendor ever leave the key under the doormat again. Amen.

How to celebrate

Celebrated by updating the firmware to 1.4.8 or later and closing Telnet, for good.

Technical record

Disclosed on
April 6 2017
CVE
CVE-2017-7576

DragonWave Horizon 1.01.03 wireless radios have hardcoded login credentials (such as the username of energetic and password of wireless) meant to allow the vendor to access the devices. These credentials can be used in the web interface or by connecting to the device via TELNET. This is fixed in recent versions including 1.4.8.

Sources: nvd.nist.gov

📅 Add to your calendar

Saints:Google CalendarApple, Outlook and others (.ics)

Observances (feasts, scourges and miracles):Google CalendarApple, Outlook and others (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.