CVE-2014-0328 The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send....
HighCVSS 9.3
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cobham ailor 6110 mini-c gmdss | All versions | No fix listed |
| cobham sailor 6006 message terminal | All versions | No fix listed |
| cobham sailor 6222 vhf | All versions | No fix listed |
| cobham sailor 6300 mf hf | All versions | No fix listed |
References
- VU#179732 third-party-advisory us-government-resource