PT-2014-3559 · Iridium · Iridium Satellite Terminals

Cesar Cerrudo + 1 · Published 2014-08-17 · Updated 2014-08-28 · CVE-2014-0326

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Iridium satellite terminals (affected versions not specified)

Description The issue allows remote attackers to read hardcoded credentials via the web interface on the Pilot Below Deck Equipment (BDE) and OpenPort implementations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2014-0326

Affected Products

Iridium Satellite Terminals

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-0326 · Security Note
• http://kb.cert.org/vuls/id/578598 · Note