Auth bypass in Gatehouse
CVE-2013-6035
The firmware on GateHouse; Harris BGAN RF-7800B-VU204 and BGAN RF-7800B-DU204; Hughes Network Systems 9201, 9450, and 9502; Inmarsat; Japan Radio JUE-250 and JUE-500; and Thuraya IP satellite terminals does not require authentication for sessions on TCP port 1827, which allows remote attackers to execute arbitrary code via unspecified protocol operations.
Vulnerability class: Broken Authentication
EPSS: 0.046 (90.6th percentile) — read the EPSS interpretation.
Affected products
- Gatehouse
- Harris Bgan — versions rf-7800b-du204, rf-7800b-vu204
- Hughes_network_systems 9201
- Hughes_network_systems 9450
- Hughes_network_systems 9502
- Inmarsat
- Japan_radio Jue-250
- Japan_radio Jue-500
- Thuraya_telecommunications Ip
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
Frequently asked questions
- What is CVE-2013-6035?
- CVE-2013-6035 is a vulnerability in Gatehouse, classified under Improper Authentication. Published 2014-02-04.
- Is CVE-2013-6035 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.