CVE-2014-2964 — MEDIUM (6.9)

Vulnerability Description

Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges by sending a password over a serial line.

CVSS Score

6.9

MEDIUM

AV:L/AC:M/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Cobham	Aviator 700D	-
Cobham	Aviator 700E	-

References

http://www.kb.cert.org/vuls/id/882207Third Party AdvisoryUS Government Resource
http://www.kb.cert.org/vuls/id/882207Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2014-2964?

CVE-2014-2964 is a vulnerability with a CVSS score of 6.9 (MEDIUM). Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges ...

How severe is CVE-2014-2964?

CVE-2014-2964 has been rated MEDIUM with a CVSS base score of 6.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-2964?

Check the references section above for vendor advisories and patch information. Affected products include: Cobham Aviator 700D, Cobham Aviator 700E.