Lucene search

K
cveCertccCVE-2014-2941
HistoryAug 15, 2014 - 11:15 a.m.

CVE-2014-2941

2014-08-1511:15:42
certcc
web.nvd.nist.gov
27
cobham
sailor 6000
satellite terminals
hardcoded credentials
remote access
cve-2014-2941
nvd

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:C/A:N

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

55.5%

Cobham Sailor 6000 satellite terminals have hardcoded Tbus 2 credentials, which allows remote attackers to obtain access via a TBUS2 command. NOTE: the vendor reportedly states "there is no possibility to exploit another user’s credentials.

Affected configurations

Nvd
Node
cobhamailor_6110_mini-c_gmdssMatch-
OR
cobhamsailor_6006_message_terminalMatch-
OR
cobhamsailor_6222_vhfMatch-
OR
cobhamsailor_6300_mf_\/_hfMatch-
VendorProductVersionCPE
cobhamailor_6110_mini-c_gmdss-cpe:2.3:h:cobham:ailor_6110_mini-c_gmdss:-:*:*:*:*:*:*:*
cobhamsailor_6006_message_terminal-cpe:2.3:h:cobham:sailor_6006_message_terminal:-:*:*:*:*:*:*:*
cobhamsailor_6222_vhf-cpe:2.3:h:cobham:sailor_6222_vhf:-:*:*:*:*:*:*:*
cobhamsailor_6300_mf_\/_hf-cpe:2.3:h:cobham:sailor_6300_mf_\/_hf:-:*:*:*:*:*:*:*

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:C/A:N

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

55.5%

Related for CVE-2014-2941