Lucene search
HistoryAug 15, 2014 - 11:15 a.m.
CVE-2014-2940
cobham
sailor 900
sailor 6000
satellite terminals
firmware
hardcoded credentials
admin access
vulnerability
nvd
cve-2014-2940
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.5%
Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows attackers to obtain administrative control by leveraging physical access or terminal access.
Affected configurations
Node
cobhamsailor_900_firmwareMatch1.08_mfhf
ORcobhamsailor_900_firmwareMatch2.11_vhf
cobhamsailor_900_vsatMatch-
Node
cobhamsailor_6000_series_firmwareMatch1.08_mfhf
ORcobhamsailor_6000_series_firmwareMatch2.11_vhf
cobhamailor_6110_mini-c_gmdssMatch-
ORcobhamsailor_6006_message_terminalMatch-
ORcobhamsailor_6222_vhfMatch-
ORcobhamsailor_6300_mf_\/_hfMatch-
References
Related
prion
prion
Hardcoded credentials
2014-08-15 11:15:00
cert
cert
Cobham Sailor satellite terminals contain hardcoded credentials
2014-08-07 00:00:00
nvd
nvd
CVE-2014-2940
2014-08-15 11:15:42
cvelist
cvelist
CVE-2014-2940
2014-08-15 10:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
60.5%
Related for CVE-2014-2940