PT-2014-3019 · Hughes Network Systems+5 · Hughes Network Systems 9450+9
Ruben Santamarta
·
Published
2014-02-04
·
Updated
2014-02-04
·
CVE-2013-6034
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
GateHouse (affected versions not specified)
Harris BGAN RF-7800B-VU204
Harris BGAN RF-7800B-DU204
Hughes Network Systems 9201
Hughes Network Systems 9450
Hughes Network Systems 9502
Inmarsat (affected versions not specified)
Japan Radio JUE-250
Japan Radio JUE-500
Thuraya IP satellite terminals (affected versions not specified)
Description
The issue concerns hardcoded credentials in the firmware of various satellite terminals, making it easier for attackers to gain unspecified login access.
Recommendations
For Harris BGAN RF-7800B-VU204, consider changing the hardcoded credentials to unique, secure credentials.
For Harris BGAN RF-7800B-DU204, consider changing the hardcoded credentials to unique, secure credentials.
For Hughes Network Systems 9201, consider changing the hardcoded credentials to unique, secure credentials.
For Hughes Network Systems 9450, consider changing the hardcoded credentials to unique, secure credentials.
For Hughes Network Systems 9502, consider changing the hardcoded credentials to unique, secure credentials.
For Japan Radio JUE-250, consider changing the hardcoded credentials to unique, secure credentials.
For Japan Radio JUE-500, consider changing the hardcoded credentials to unique, secure credentials.
At the moment, there is no information about a newer version that contains a fix for GateHouse, Inmarsat, and Thuraya IP satellite terminals.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Gatehouse
Harris Bgan Rf-7800B-Du204
Harris Bgan Rf-7800B-Vu204
Hughes Network Systems 9201
Hughes Network Systems 9450
Hughes Network Systems 9502
Inmarsat
Japan Radio Jue-250
Japan Radio Jue-500
Thuraya Ip