Vulnerability in Cobham Ailor 6110 Mini-C Gmdss
CVE-2014-2940
Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows attackers to obtain administrative control by leveraging physical access or terminal access.
EPSS: 0.022 (80.8th percentile) — read the EPSS interpretation.
Affected products
- Cobham Ailor_6110_mini-c_gmdss
- Cobham Sailor_6000_series_firmware — versions 1.08_mfhf, 2.11_vhf
- Cobham Sailor_6006_message_terminal
- Cobham Sailor_6222_vhf
- Cobham Sailor_6300_mf_\/_hf
- Cobham Sailor_900_firmware — versions 1.08_mfhf, 2.11_vhf
- Cobham Sailor_900_vsat
- N/a — versions n/a
References
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)