Lucene search
HistoryAug 17, 2014 - 11:55 p.m.
CVE-2014-0327
cve-2014-0327
terminal upgrade tool
bde
openport
iridium satellite terminals
remote code execution
firmware upload
tcp port 54321
nvd
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.7%
The Terminal Upgrade Tool in the Pilot Below Deck Equipment (BDE) and OpenPort implementations on Iridium satellite terminals allows remote attackers to execute arbitrary code by uploading new firmware to TCP port 54321.
Affected configurations
Node
iridiumopen_portMatch-
ORiridiumpilot_below_deck_equipmentMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| iridium:open_port | iridium open port | eq | - |
| iridium:pilot_below_deck_equipment | iridium pilot below deck equipment | eq | - |
References
Related
prion
prion
Code injection
2014-08-17 23:55:00
nvd
nvd
CVE-2014-0327
2014-08-17 23:55:04
cvelist
cvelist
CVE-2014-0327
2014-08-17 23:00:00
cert
cert
Iridium Pilot and OpenPort contain multiple vulnerabilities
2014-08-07 00:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.7%
Related for CVE-2014-0327