exploitDog

CVE-2014-2964

Опубликовано: 15 авг. 2014

Источник: nvd

CVSS2: 6.9

EPSS Низкий

Описание

Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges by sending a password over a serial line.

Комментарий

CWE-798: Use of Hard-coded Credentials

Ссылки

http://www.kb.cert.org/vuls/id/882207
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/882207
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:h:cobham:aviator_700d:-:*:*:*:*:*:*:*

cpe:2.3:h:cobham:aviator_700e:-:*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.00198

Низкий

6.9 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-xm5x-mwvv-f4pq

github

больше 3 лет назад

Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges by sending a password over a serial line.

EPSS

Процентиль: 42%

0.00198

Низкий

6.9 Medium

CVSS2

Дефекты

NVD-CWE-Other