CVE-2017-20234

GarrettCom Magnum 6K and 10K managed switches contain an authentication bypass vulnerability that allows unauthenticated attackers to gain unauthorized access by exploiting a hardcoded string in the authentication mechanism. Attackers can bypass login controls to access administrative functions and sensitive switch configuration without valid credentials.

Score

CVSS 3.1 9.8 Critical

Status

Awaiting Analysis - disclosure@vulncheck.com

Published

2026-04-03

Last modified

2026-10-01

Weaknesses

CWE-798

Affected products

• Magnum Managed Networks Software-6k (Garrettcom)

References

• https://assets.belden.com/m/114be964b4651983/original/Security-Bulletin-MNS-6K-10K-GarrettCom-BSECV-2017-08.pdf
• https://www.vulncheck.com/advisories/garrettcom-magnum-6k-and-10k-authentication-bypass-via-hardcoded-string