PT-2014-3560 · Iridium · Iridium Satellite Terminals

Cesar Cerrudo + 1 · Published 2014-08-17 · Updated 2014-08-28 · CVE-2014-0327

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Iridium satellite terminals (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary code by uploading new firmware to the TCP port 54321. This is related to the Terminal Upgrade Tool in the Pilot Below Deck Equipment (BDE) and OpenPort implementations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2014-0327

Affected Products

Iridium Satellite Terminals

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-0327 · Security Note
• http://kb.cert.org/vuls/id/578598 · Note