CVE-2014-2941

2014-08-1511:15:42

[email protected]

web.nvd.nist.gov

cobham

sailor 6000

satellite terminals

hardcoded credentials

remote access

cve-2014-2941

nvd

7.1 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:C/A:N

6.8 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

55.5%

JSON

Cobham Sailor 6000 satellite terminals have hardcoded Tbus 2 credentials, which allows remote attackers to obtain access via a TBUS2 command. NOTE: the vendor reportedly states "there is no possibility to exploit another user’s credentials.

Affected configurations

NVD

Node

cobhamailor_6110_mini-c_gmdssMatch-

cobhamsailor_6006_message_terminalMatch-

cobhamsailor_6222_vhfMatch-

cobhamsailor_6300_mf_\/_hfMatch-

CPENameOperatorVersion
cobham:ailor_6110_mini-c_gmdsscobham ailor 6110 mini-c gmdsseq-
cobham:sailor_6006_message_terminalcobham sailor 6006 message terminaleq-
cobham:sailor_6222_vhfcobham sailor 6222 vhfeq-
cobham:sailor_6300_mf_\/_hfcobham sailor 6300 mf / hfeq-

CPE	Name	Operator	Version
cobham:ailor_6110_mini-c_gmdss	cobham ailor 6110 mini-c gmdss	eq	-
cobham:sailor_6006_message_terminal	cobham sailor 6006 message terminal	eq	-
cobham:sailor_6222_vhf	cobham sailor 6222 vhf	eq	-
cobham:sailor_6300_mf_\/_hf	cobham sailor 6300 mf / hf	eq	-