CVE-2014-0327

2014-08-1723:55:04

[email protected]

web.nvd.nist.gov

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.008

Percentile

81.7%

JSON

The Terminal Upgrade Tool in the Pilot Below Deck Equipment (BDE) and OpenPort implementations on Iridium satellite terminals allows remote attackers to execute arbitrary code by uploading new firmware to TCP port 54321.

Affected configurations

Nvd

Node

iridiumopen_portMatch-

iridiumpilot_below_deck_equipmentMatch-

VendorProductVersionCPE
iridiumopen_port-cpe:2.3:h:iridium:open_port:-:*:*:*:*:*:*:*
iridiumpilot_below_deck_equipment-cpe:2.3:h:iridium:pilot_below_deck_equipment:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
iridium	open_port	-	cpe:2.3:h:iridium:open_port:-:::::::*
iridium	pilot_below_deck_equipment	-	cpe:2.3:h:iridium:pilot_below_deck_equipment:-:::::::*