PT-2014-4986 · Cobham · Cobham Aviator 700D

Publicado 2014-08-15 · Atualizado 2014-08-15 · CVE-2014-2964

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cobham Aviator 700D and 700E satellite terminals (affected versions not specified)

Description The issue concerns hardcoded passwords for certain programs, including debug, prod, do160, and flrp. This allows attackers with physical access to gain privileges by sending a password over a serial line.

Recommendations For Cobham Aviator 700D and 700E satellite terminals, consider changing the hardcoded passwords for the debug, prod, do160, and flrp programs as a mitigation measure. Restrict physical access to the terminals to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2014-2964

Produtos afetados

Cobham Aviator 700D

Referências · 2

• http://kb.cert.org/vuls/id/882207 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2964 · Nota de Segurança