EUVD-2014-0366

Malware in sbrugna...

CVE-2014-0328

The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response...

CVE-2014-0328

The CVE-2014-0328 entry describes Cobham’s thraneLINK protocol on Cobham devices as failing to verify firmware signatures, enabling a remote attacker with physical or terminal access to trigger SNMP and TFTP interactions to install a malicious firmware image. The NVD entry reiterates that lack of...