PT-2014-3560 · Iridium · Iridium Satellite Terminals

Cesar Cerrudo + 1 · Publicado 2014-08-17 · Atualizado 2014-08-28 · CVE-2014-0327

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Iridium satellite terminals (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary code by uploading new firmware to the TCP port 54321. This is related to the Terminal Upgrade Tool in the Pilot Below Deck Equipment (BDE) and OpenPort implementations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2014-0327

Produtos afetados

Iridium Satellite Terminals

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-0327 · Nota de Segurança
• http://kb.cert.org/vuls/id/578598 · Nota