Vulnerability in Cobham Ailor 6110 Mini-C Gmdss
CVE-2014-2940
Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows attackers to obtain administrative control by leveraging physical access or terminal access.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.022 (82.0th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 82nd percentile — 82.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.022 · newest: 0.022 · change: 0.000
Affected products
- Cobham Ailor 6110 Mini-C Gmdss
- Cobham Sailor 6000 Series Firmware — versions 1.08_mfhf, 2.11_vhf
- Cobham Sailor 6006 Message Terminal
- Cobham Sailor 6222 Vhf
- Cobham Sailor 6300 Mf \/ Hf
- Cobham Sailor 900 Firmware — versions 1.08_mfhf, 2.11_vhf
- Cobham Sailor 900 Vsat
References
- www.kb.cert.org/vuls/id/460687 (US Government Resource, Third Party Advisory, third-party-advisory)