PT-2014-4986 · Cobham · Cobham Aviator 700D

Published 2014-08-15 · Updated 2014-08-15 · CVE-2014-2964

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cobham Aviator 700D and 700E satellite terminals (affected versions not specified)

Description The issue concerns hardcoded passwords for certain programs, including debug, prod, do160, and flrp. This allows attackers with physical access to gain privileges by sending a password over a serial line.

Recommendations For Cobham Aviator 700D and 700E satellite terminals, consider changing the hardcoded passwords for the debug, prod, do160, and flrp programs as a mitigation measure. Restrict physical access to the terminals to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2014-2964

Affected Products

Cobham Aviator 700D

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-2964 · Security Note
• http://kb.cert.org/vuls/id/882207 · Note