CVE-2014-2964

Cobham Aviator 700D and 700E satellite terminals have hardcoded passwords for the (1) debug, (2) prod, (3) do160, and (4) flrp programs, which allows physically proximate attackers to gain privileges by sending a password over a serial line.

Score

CVSS 2.0 6.9 Medium

Status

Modified - cret@cert.org

Published

2014-08-15

Last modified

2024-08-06

Affected products

• Aviator 700d (Cobham)
• Aviator 700e (Cobham)

References

• http://www.kb.cert.org/vuls/id/882207