Lucene search

CertccCVE-2014-2940

HistoryAug 15, 2014 - 11:15 a.m.

CVE-2014-2940

2014-08-1511:15:42

certcc

web.nvd.nist.gov

cobham

sailor 900

sailor 6000

satellite terminals

firmware

hardcoded credentials

admin access

vulnerability

nvd

cve-2014-2940

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.002

Percentile

60.4%

JSON

Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows attackers to obtain administrative control by leveraging physical access or terminal access.

Affected configurations

Nvd

Node

cobhamsailor_900_firmwareMatch1.08_mfhf

cobhamsailor_900_firmwareMatch2.11_vhf

AND

cobhamsailor_900_vsatMatch-

Node

cobhamsailor_6000_series_firmwareMatch1.08_mfhf

cobhamsailor_6000_series_firmwareMatch2.11_vhf

AND

cobhamailor_6110_mini-c_gmdssMatch-

cobhamsailor_6006_message_terminalMatch-

cobhamsailor_6222_vhfMatch-

cobhamsailor_6300_mf_\/_hfMatch-

VendorProductVersionCPE
cobhamsailor_900_firmware1.08_mfhfcpe:2.3:o:cobham:sailor_900_firmware:1.08_mfhf:*:*:*:*:*:*:*
cobhamsailor_900_firmware2.11_vhfcpe:2.3:o:cobham:sailor_900_firmware:2.11_vhf:*:*:*:*:*:*:*
cobhamsailor_900_vsat-cpe:2.3:h:cobham:sailor_900_vsat:-:*:*:*:*:*:*:*
cobhamsailor_6000_series_firmware1.08_mfhfcpe:2.3:o:cobham:sailor_6000_series_firmware:1.08_mfhf:*:*:*:*:*:*:*
cobhamsailor_6000_series_firmware2.11_vhfcpe:2.3:o:cobham:sailor_6000_series_firmware:2.11_vhf:*:*:*:*:*:*:*
cobhamailor_6110_mini-c_gmdss-cpe:2.3:h:cobham:ailor_6110_mini-c_gmdss:-:*:*:*:*:*:*:*
cobhamsailor_6006_message_terminal-cpe:2.3:h:cobham:sailor_6006_message_terminal:-:*:*:*:*:*:*:*
cobhamsailor_6222_vhf-cpe:2.3:h:cobham:sailor_6222_vhf:-:*:*:*:*:*:*:*
cobhamsailor_6300_mf_\/_hf-cpe:2.3:h:cobham:sailor_6300_mf_\/_hf:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cobham	sailor_900_firmware	1.08_mfhf	cpe:2.3:o:cobham:sailor_900_firmware:1.08_mfhf:::::::*
cobham	sailor_900_firmware	2.11_vhf	cpe:2.3:o:cobham:sailor_900_firmware:2.11_vhf:::::::*
cobham	sailor_900_vsat	-	cpe:2.3:h:cobham:sailor_900_vsat:-:::::::*
cobham	sailor_6000_series_firmware	1.08_mfhf	cpe:2.3:o:cobham:sailor_6000_series_firmware:1.08_mfhf:::::::*
cobham	sailor_6000_series_firmware	2.11_vhf	cpe:2.3:o:cobham:sailor_6000_series_firmware:2.11_vhf:::::::*
cobham	ailor_6110_mini-c_gmdss	-	cpe:2.3:h:cobham:ailor_6110_mini-c_gmdss:-:::::::*
cobham	sailor_6006_message_terminal	-	cpe:2.3:h:cobham:sailor_6006_message_terminal:-:::::::*
cobham	sailor_6222_vhf	-	cpe:2.3:h:cobham:sailor_6222_vhf:-:::::::*
cobham	sailor_6300_mf_\/_hf	-	cpe:2.3:h:cobham:sailor_6300_mf_\/_hf:-:::::::*

References

www.kb.cert.org/vuls/id/460687

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.002

Percentile

60.4%

JSON

Related for CVE-2014-2940