PT-2012-4438 · Garrettcom · Garrettcom Magnum Mns-6K

Published 2012-09-04 · Updated 2012-09-04 · CVE-2012-3014

Positive Technologies (AI Summary)

CVSS v2.0

7.7

High

Base vector

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GarrettCom Magnum MNS-6K versions prior to 4.4.0 GarrettCom Magnum MNS-6K versions 14.x prior to 14.4.0

Description The issue concerns a hardcoded password for an administrative account in the Management Software application. This hardcoded password allows local users to gain privileges, potentially leading to unauthorized access and control.

Recommendations For versions prior to 4.4.0, update to version 4.4.0 or later. For versions 14.x prior to 14.4.0, update to version 14.4.0 or later.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2012-3014

Affected Products

Garrettcom Magnum Mns-6K

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2012-3014 · Security Note
• http://garrettcom.com/techsupport/6k_dl/6k440_rn.pdf · Vendor Advisory
• http://us-cert.gov/control_systems/pdf/ICSA-12-243-01.pdf · Note