Vulnerability Details : CVE-2014-2941
Cobham Sailor 6000 satellite terminals have hardcoded Tbus 2 credentials, which allows remote attackers to obtain access via a TBUS2 command. NOTE: the vendor reportedly states "there is no possibility to exploit another user's credentials.
Products affected by CVE-2014-2941
- cpe:2.3:h:cobham:sailor_6222_vhf:-:*:*:*:*:*:*:*
- cpe:2.3:h:cobham:sailor_6300_mf_\/_hf:-:*:*:*:*:*:*:*
- cpe:2.3:h:cobham:ailor_6110_mini-c_gmdss:-:*:*:*:*:*:*:*
- cpe:2.3:h:cobham:sailor_6006_message_terminal:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2014-2941
1.82%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 82 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2014-2941
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.1
|
HIGH | AV:N/AC:M/Au:N/C:N/I:C/A:N |
8.6
|
6.9
|
NIST |
References for CVE-2014-2941
-
http://www.kb.cert.org/vuls/id/269991
VU#269991 - Cobham Sailor 6000 series satellite terminal contain hardcoded credentialsThird Party Advisory;US Government Resource
Jump to