Vulnerability CVE-2014-2940

Vulnerability CVE-2014-2940

Published: 2014-08-15

Description:

Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows attackers to obtain administrative control by leveraging physical access or terminal access.

Type:

CWE-Other

CVSS2 => (AV:N/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
10/10	10/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
Cobham -> Sailor 6000 series firmware
Cobham -> Sailor 900 firmware

References:

http://www.kb.cert.org/vuls/id/460687

Copyright 2024, cxsecurity.com