CVE-2014-0328
Severity Score
9.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The thraneLINK protocol implementation on Cobham devices does not verify firmware signatures, which allows attackers to execute arbitrary code by leveraging physical access or terminal access to send an SNMP request and a TFTP response.
La implementación del protocolo thraneLINK en los dispositivos Cobham no verifica las firmas de firmware, lo que permite a atacantes ejecutar código arbitrario mediante el aprovechamiento del acceso físico o acceso al terminal para enviar una solicitud SNMP y una respuesta TFTP.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-12-05 CVE Reserved
- 2014-08-15 CVE Published
- 2024-08-06 CVE Updated
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| http://www.kb.cert.org/vuls/id/179732 | Third Party Advisory |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cobham Search vendor "Cobham" | Ailor 6110 Mini-c Gmdss Search vendor "Cobham" for product "Ailor 6110 Mini-c Gmdss" | - | - |
Affected
| ||||||
| Cobham Search vendor "Cobham" | Sailor 6006 Message Terminal Search vendor "Cobham" for product "Sailor 6006 Message Terminal" | - | - |
Affected
| ||||||
| Cobham Search vendor "Cobham" | Sailor 6222 Vhf Search vendor "Cobham" for product "Sailor 6222 Vhf" | - | - |
Affected
| ||||||
| Cobham Search vendor "Cobham" | Sailor 6300 Mf \/ Hf Search vendor "Cobham" for product "Sailor 6300 Mf \/ Hf" | - | - |
Affected
| ||||||