The Management Software application in GarrettCom Magnum MNS-6K before 4.4.0, and 14.x before 14.4.0, has a hardcoded password for an administrative account, which allows local users to gain privileges via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Magnum_managed_networks_software-6k | Garrettcom | * | 4.3.1 (including) |
| Magnum_managed_networks_software-6k | Garrettcom | 4.2 (including) | 4.2 (including) |
| Magnum_managed_networks_software-6k | Garrettcom | 4.2.1 (including) | 4.2.1 (including) |
| Magnum_managed_networks_software-6k | Garrettcom | 4.3.0 (including) | 4.3.0 (including) |
| Magnum_managed_networks_software-6k_secure | Garrettcom | 14.2 (including) | 14.2 (including) |
| Magnum_managed_networks_software-6k_secure | Garrettcom | 14.2.1 (including) | 14.2.1 (including) |
| Magnum_managed_networks_software-6k_secure | Garrettcom | 14.3.0 (including) | 14.3.0 (including) |
| Magnum_managed_networks_software-6k_secure | Garrettcom | 14.3.1 (including) | 14.3.1 (including) |