[Forgot Password]
Login  Register Subscribe

23631

 
 

115083

 
 

97147

 
 

909

 
 

78730

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2012-3014

Date: (C)2012-09-04   (M)2015-12-16
 
CVSS Score: 7.7Access Vector: ADJACENT_NETWORK
Exploitability Subscore: 5.1Access Complexity: LOW
Impact Subscore: 10.0Authentication: SINGLE_INSTANCE
 Confidentiality: COMPLETE
 Integrity: COMPLETE
 Availability: COMPLETE











The Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14.4.0, has a hardcoded password for an administrative account, which allows local users to gain privileges via unspecified vectors.

Reference:
http://www.garrettcom.com/techsupport/6k_dl/6k440_rn.pdf
http://www.us-cert.gov/control_systems/pdf/ICSA-12-243-01.pdf

CPE    8
cpe:/a:garrettcom:magnum_managed_networks_software-6k_secure:14.3.0
cpe:/a:garrettcom:magnum_managed_networks_software-6k_secure:14.2.1
cpe:/a:garrettcom:magnum_managed_networks_software-6k:4.3.1
cpe:/a:garrettcom:magnum_managed_networks_software-6k:4.3.0
...
CWE    1
CWE-255

© 2013 SecPod Technologies